Wordpress Auto-Exploiter [ Tutorial ]

[Aerosol]

Credit's to: Foksi

Wordpress Auto-Exploiter is a tool that enable you to register as new admin on a wordpress site which have the bug on the Ajax.php file.

How to create dorks?

It's very easy so create the dorks, the list of vulnerable themes are already provided on the right richtext box. So, you just need to add the theme name.

Dork:

inurl:/wp-content/themes/[theme_name]

Example:

inurl:/wp-content/themes/appius

How to use the tools?

It's easy, once you have found your target,

• Simply paste the site URL,theme name, an your email in the textbox
  
• 
  
• Click on Confirm > Exploit
  
• 
  
• If your target is vulnerable, the "Register" button will be enabled
  
• 
  
• Click on Register and the webbrowser will bring you to the registration page
  
• 
  
• Enter your username and email
  
• 
  
• Check your email inbox for the confirmation and the password for your account.
  
• 
  
• Login to the site and there you go
  
• 
  
• You also can upload shell into the site.