+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Found 'Database search and replace' on wordpress site. What next? (/showthread.php?tid=4369646)
Found 'Database search and replace' on wordpress site. What next? - joever11 - Jul 31, 2014
So I was scanning a wordpress website using WPScan in Kali Linux.
I found out that they replaced their databases recently and they didn't uninstall the script.
I found a url to this script:
https://interconnectit.com/products/search-and-replace-for-wordpress-databases/
The url is:
website.com/searchreplacedb2.php
I saw you can edit the database with it easely. Now I don't want to make fast decissions and I want to know what to do next, should I somehow find out what the current databases contain first or should I make one and change it directly?
Hope some people can help me :D
* - gizmodo - Jul 31, 2014
(Jul 31, 2014 05:22 AM)joever11 Wrote: So I was scanning a wordpress website using WPScan in Kali Linux.
I found out that they replaced their databases recently and they didn't uninstall the script.
I found a url to this script:
https://interconnectit.com/products/search-and-replace-for-wordpress-databases/
The url is:
website.com/searchreplacedb2.php
I saw you can edit the database with it easely. Now I don't want to make fast decissions and I want to know what to do next, should I somehow find out what the current databases contain first or should I make one and change it directly?
Hope some people can help me :D
Maybe you can try and use this exploit http://pastebin.com/2557GJrh
* - joever11 - Jul 31, 2014
(Jul 31, 2014 06:34 AM)gizmodo Wrote: Maybe you can try and use this exploit http://pastebin.com/2557GJrh
I'm in the wordpress admin panel at the moment. But there is one big problem: I can't upload shell's as read only is enabled and when I want to upload a plugin I need to enter ftp details which I don't have...
Is there a way to bypass this?
I have tried editing plugins/theme, none worked
* - asm-99 - Jul 31, 2014
^ try login to the ftp using the information you got from the DB
* - TheWholeWorldExplodes - Jul 31, 2014
(Jul 31, 2014 07:52 AM)joever11 Wrote: I'm in the wordpress admin panel at the moment. But there is one big problem: I can't upload shell's as read only is enabled and when I want to upload a plugin I need to enter ftp details which I don't have...
Is there a way to bypass this?
I have tried editing plugins/theme, none worked
have you tried editing themes to injecct a shell there?
* - joever11 - Aug 1, 2014
(Jul 31, 2014 03:15 PM)TheWholeWorldExplodes Wrote: have you tried editing themes to injecct a shell there?
Yes, I can't edit them because Read-Only is enabled on the ftp, which I don't have access to.
* - yassinemks - Jul 23, 2015
please i have get a user and pasword of database how i can connect to database
* - dalekdj - Aug 21, 2015
Hi to all,i'm new.
how is possible to use the exploit ?
* - sun215 - Mar 2, 2017
Hello, i have the same problem, am i able to watch content of database with this script? I've alredy tried to use exploit above, it shows database, and that's it. Currently mysql port is close, so this script is my last hope. Any suggestions. Thanks.
Maybe i can somehow add new user, or just see current database.