+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: Is There Any Exploit to get into a wordpress (/Thread-Is-There-Any-Exploit-to-get-into-a-wordpress)
Is There Any Exploit to get into a wordpress - JackoLantern - 09-19-2013
Hey guys i was wondering if anyone new if there was a wordpress exploit to get into pages?
there probarbly isnt and you probarbly think its a bad qestion im sorry if you think so but its good to check
RE: Is There Any Exploit to get into a wordpress - shock - 09-19-2013
What you mean by get into pages? Password protected pages? Admin pages? Member-only pages?
RE: Is There Any Exploit to get into a wordpress - JackoLantern - 09-19-2013
Admin Pages Like Password Protected Canyt brute force because i know that the password will not be in my wordlist
need some sorta way i want to get into the cp
RE: Is There Any Exploit to get into a wordpress - shock - 09-20-2013
Oh, well you're gonna struggle a lot with that, I've tried it before and it's almost impossible.
What I would recommend though, is either to hack the admin's email and just do a password reset, or to impersonate the admin if there is more than one staff, like for example there are 2 owners, you send an email like to one saying "hey, forgot the wp admin password, please send it to me on randomuser@Gmail.com, as my password reset isn't working because my email doesn't want to receive emails" or something like that. It's rather easy to hack websites, not because the cms is weak (wordpress is rather strong with passwords), but because admins are usually rather stupid.
Hope this helped!
RE: Is There Any Exploit to get into a wordpress - JackoLantern - 09-20-2013
(09-20-2013, 07:39 AM)shock Wrote: Oh, well you're gonna struggle a lot with that, I've tried it before and it's almost impossible.
What I would recommend though, is either to hack the admin's email and just do a password reset, or to impersonate the admin if there is more than one staff, like for example there are 2 owners, you send an email like to one saying "hey, forgot the wp admin password, please send it to me on randomuser@Gmail.com, as my password reset isn't working because my email doesn't want to receive emails" or something like that. It's rather easy to hack websites, not because the cms is weak (wordpress is rather strong with passwords), but because admins are usually rather stupid.
Hope this helped!
Thanks Man This I Think WIll Be Very Helpful
RE: Is There Any Exploit to get into a wordpress - chapp - 09-21-2013
Another easy way to get access to a WP installation is to look after what plugins are installed and then look for known vulnerabilities in these plugins
RE: Is There Any Exploit to get into a wordpress - RaccoonCity_mybb_import13707 - 09-24-2013
Yes, there is a SQLi tutorial on that, I can PM you it if you want it!
RE: Is There Any Exploit to get into a wordpress - JackoLantern - 09-25-2013
Yea why not sure everythings worth a try at this stage
RE: Is There Any Exploit to get into a wordpress - ElinaD - 09-26-2013
for WordPress hack you should look into vulnerability of
plugins
file manager
themes
WordPress have many 0 day vulnerabilities just look in deeply
Eli
RE: Is There Any Exploit to get into a wordpress - XDarkCoder - 09-26-2013
Exploit-DB is a good source for exploits (Wordpress Exploits)
For wordpress exploits you have too look for SQLi injiection or Password Reset vulnerability or even plugins that affects versions before 3.6.1.