Skip to content

Commit 2bd27b2

Browse files
committed
Adds setup information to documentation
1 parent f6e0cd9 commit 2bd27b2

1 file changed

Lines changed: 124 additions & 0 deletions

File tree

documentation/modules/exploit/multi/http/wp_plugin_supsystic_contact_form_rce.md

Lines changed: 124 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,130 @@ further clarification).
1010

1111
Tested Contact Form version 1.7.36 on Ubuntu 24.04 and Windows 10.
1212

13+
## Setup
14+
15+
### Install XAMPP
16+
17+
https://sourceforge.net/projects/xampp/
18+
19+
~~~bash
20+
sudo ~/Downloads/xampp-linux-x64-8.2.12-0-installer.run
21+
~~~
22+
23+
#### Add LAMPP Binaries to PATH
24+
25+
~~~bash
26+
echo 'export PATH="/opt/lampp/bin:$PATH"' >> ~/.bash_profile
27+
~~~
28+
29+
### Download Wordpress
30+
31+
https://developer.wordpress.org/advanced-administration/before-install/howto-install/
32+
33+
Download the wordpress zip from https://wordpress.org/download/
34+
35+
~~~bash
36+
sudo mkdir /opt/lampp/htdocs/wordpress
37+
sudo cp ~/Downloads/wordpress-6.9.4.zip /opt/lampp/htdocs/wordpress/
38+
cd /opt/lampp/htdocs/wordpress/
39+
sudo 7z x wordpress-6.9.4.zip
40+
~~~
41+
42+
### Create Wordpress Database
43+
44+
#### Login as root
45+
46+
*Just hit enter when prompted for the password.
47+
48+
~~~
49+
mysql -u root -p
50+
Enter password:
51+
~~~
52+
53+
#### Create Wordpress Database
54+
55+
~~~sql
56+
CREATE DATABASE wordpress_db CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
57+
~~~
58+
59+
### Configure Wordpress
60+
61+
#### Configure Database
62+
63+
~~~
64+
sudo mv wp-config-sample.php wp-config.php
65+
~~~
66+
67+
Your config should look like this if you're going to use the root database user.
68+
69+
~~~
70+
// ** Database settings - You can get this info from your web host ** //
71+
/** The name of the database for WordPress */
72+
define( 'DB_NAME', 'wordpress_db' );
73+
74+
/** Database username */
75+
define( 'DB_USER', 'root' );
76+
77+
/** Database password */
78+
define( 'DB_PASSWORD', '' );
79+
80+
/** Database hostname */
81+
define( 'DB_HOST', 'localhost' );
82+
83+
/** Database charset to use in creating database tables. */
84+
define( 'DB_CHARSET', 'utf8mb4' );
85+
86+
/** The database collate type. Don't change this if in doubt. */
87+
define( 'DB_COLLATE', '' );
88+
~~~
89+
90+
#### Configure Site
91+
92+
When you first connect you'll be redirected to http://localhost/wordpress/wp-admin/install.php
93+
94+
Site Title: ContactFormTest
95+
Username: admin1
96+
Password: password123
97+
Email: email@email.com
98+
99+
## Contact Form Wordpress Plugin
100+
101+
https://wordpress.org/plugins/contact-form-by-supsystic/advanced/
102+
103+
Go to "Advanced View", Then scroll down to "Previous Versions" and select 1.7.36 and Download
104+
105+
### Installation
106+
107+
1. Download Contact Form plugin
108+
2. Unarchive contact-form-by-supsystic.zip
109+
3. Move contents to \wp-content\plugins\
110+
4. Go to admin panel => open item “Plugins” => activate Contact Form Builder by Supsystic
111+
112+
#### 2. Unarchive contact-form-by-supsystic.zip
113+
114+
~~~bash
115+
7z x contact-form-by-supsystic.1.7.36.zip
116+
sudo cp -r contact-form-by-supsystic /opt/lampp/htdocs/wordpress/wp-content/plugins
117+
sudo chown -R www-data:www-data /opt/lampp/htdocs/wordpress/wp-content/plugins/contact-form-by-supsystic
118+
sudo chmod -R 755 /opt/lampp/htdocs/wordpress/wp-content/plugins/contact-form-by-supsystic
119+
~~~
120+
121+
### Use Plugin
122+
123+
https://supsystic.com/documentation/contact-form-getting-started?utm_source=wordpress&utm_medium=gettingstarted&utm_campaign=contactform
124+
125+
The "Shortcode" is located at the top of the page, just to the right of "Edit"
126+
127+
Example shortcode:
128+
129+
~~~
130+
[supsystic-form id=11]
131+
~~~
132+
133+
Copy and paste that into the Sample Page
134+
135+
It should automatically place it in a "Shortcode" block when you paste.
136+
13137
## Verification Steps
14138

15139
1. Start `msfconsole`

0 commit comments

Comments
 (0)