How to get a Reverse Shell from any Wordpress ?

How to get a Reverse Shell from any Wordpress ?

The scenario : We are pentesting a wordpress site & eventually got admin credentials. After logging in, we get an admin dashboard from where we can edit themes or plugins.

From this situation, a proper reverse shell can be gained leveraging what we already have. Let’s talk about this.

STEP 1

First go to Appearance > Editor > 404 Template from the admin dashboard left hand corner.

You will see …

cyber-sec reverse reverse shell shell vulnerability wordpress