[JackoLantern]

Hey guys i was wondering if anyone new if there was a wordpress exploit to get into pages?
there probarbly isnt and you probarbly think its a bad qestion im sorry if you think so but its good to check

[shock]

What you mean by get into pages? Password protected pages? Admin pages? Member-only pages?

[JackoLantern]

Admin Pages Like Password Protected Canyt brute force because i know that the password will not be in my wordlist
need some sorta way i want to get into the cp

[shock]

Oh, well you're gonna struggle a lot with that, I've tried it before and it's almost impossible.

What I would recommend though, is either to hack the admin's email and just do a password reset, or to impersonate the admin if there is more than one staff, like for example there are 2 owners, you send an email like to one saying "hey, forgot the wp admin password, please send it to me on randomuser@Gmail.com, as my password reset isn't working because my email doesn't want to receive emails" or something like that. It's rather easy to hack websites, not because the cms is weak (wordpress is rather strong with passwords), but because admins are usually rather stupid.

Hope this helped!

[JackoLantern]

Oh, well you're gonna struggle a lot with that, I've tried it before and it's almost impossible.

What I would recommend though, is either to hack the admin's email and just do a password reset, or to impersonate the admin if there is more than one staff, like for example there are 2 owners, you send an email like to one saying "hey, forgot the wp admin password, please send it to me on randomuser@Gmail.com, as my password reset isn't working because my email doesn't want to receive emails" or something like that. It's rather easy to hack websites, not because the cms is weak (wordpress is rather strong with passwords), but because admins are usually rather stupid.

Hope this helped!

Thanks Man This I Think WIll Be Very Helpful

[chapp]

Another easy way to get access to a WP installation is to look after what plugins are installed and then look for known vulnerabilities in these plugins

[RaccoonCity_mybb_import13707]

Yes, there is a SQLi tutorial on that, I can PM you it if you want it!

[JackoLantern]

Yea why not sure everythings worth a try at this stage

[ElinaD]

for WordPress hack you should look into vulnerability of
plugins
file manager
themes
WordPress have many 0 day vulnerabilities just look in deeply


Eli

[XDarkCoder]

Exploit-DB is a good source for exploits (Wordpress Exploits)

For wordpress exploits you have too look for SQLi injiection or Password Reset vulnerability or even plugins that affects versions before 3.6.1.