Getshell can be used for a substation on the 19th floor.

Getshell can be used for a substation on the 19th floor.

Getshell can be used for a substation on the 19th floor.

It has been more than a year since the last Intranet roaming on the 19th floor. Some of them opened the dusty notepad and suddenly started to detect the 19th floor!

This is caused by weak background passwords on the UED official website on the 19th floor. The details are as follows:

Impression on the 19th floor of http://www.19ued.com/yaojiu/wp-login.php

The username and password are all yaoyaojiujiu

In fact, at first let me go to the backend. I was uneasy because I was worried that getshell would not disappoint everyone.

Sure enough, when you rush to the "appearance-edit" area in the background, the Save button is not displayed. Obviously, the template directory cannot be written.
 

Test the other functions in the background, it seems to be normal, then go to the wooyun Community Post discussion (http://zone.wooyun.org/content/24427), solution, successful getshell
 

Upload the plug-in directly with the PHP file, and a prompt will be displayed, so you don't have to click continue. This is actually uploaded! Path:/wp-content/uploads/shell. php or/wp-content/uploads/current year/current month/shell. phphttp: // www.19ued.com/yaojiu/wp-content/uploads/help.php password-7

A kitchen knife is attached. There are many sub-stations.
 

 

Solution:

Eliminate weak passwords