+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: wp-admin/admin-ajax.php exploit (/showthread.php?tid=4728545)
wp-admin/admin-ajax.php exploit - Skidy - Mar 13, 2015
I've got a URL that displays a 0 when I go to this : www.examplewebsite.com/wp-admin/admin-ajax.php | What is the exloit for this?
* - Delevingne - Mar 13, 2015
I think it displays boolean(false) which equals to 0, because you are not administrator. I'm not sure tho.
* - Skidy - Mar 13, 2015
(Mar 13, 2015 09:15 AM)D A L O Wrote: I think it displays boolean(false) which equals to 0, because you are not administrator. I'm not sure tho.
yeah, I've tried the method where you put: wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php and download their database but it doesn't work. Any other way of getting access?
(Mar 13, 2015 09:15 AM)D A L O Wrote: I think it displays boolean(false) which equals to 0, because you are not administrator. I'm not sure tho.
in the source code it has this:
Code
<input type="submit" name="wp-submit" id="wp-submit" class="button button-primary button-large" value="Log In" />
<input type="hidden" name="redirect_to" value="https://example.org.uk/wp-admin/" />
<input type="hidden" name="testcookie" value="1" />This is on the login page.. Could I try and set the value to 1???
(Mar 13, 2015 09:15 AM)D A L O Wrote: I think it displays boolean(false) which equals to 0, because you are not administrator. I'm not sure tho.
Oh and
Code
/* <![CDATA[ */
var imgmap = {"ajaxurl":"https:\/\/example.org.uk\/wp-admin\/admin-ajax.php","pulseOption":"first_time","admin_logged":"","alt_dialog":"1"};
/* ]]> */So, could I do anything with this?
* - runnerup - Mar 13, 2015
Try and find out what plugins the site is using then find exploits for those plugins.
h t t p : / / wppluginchecker . earthpeople . se/
Sorry about the spaces I'm not allowed to post links.
* - Skidy - Mar 13, 2015
(Mar 13, 2015 10:00 AM)runnerup Wrote: Try and find out what plugins the site is using then find exploits for those plugins.
h t t p : / / wppluginchecker . earthpeople . se/
Sorry about the spaces I'm not allowed to post links.
Any ideas on exploiting plugins?? How would I exploite them?
[img]http://screenshu.com/static/uploads/temporary/e1/tl/ia/i2kov9.jpg[/img]
Any exploits from those?
* - SIM-209986 - Mar 13, 2015
Use wpscan in Kali Linux. Does the job. but make sure to update the database first.
* - Skidy - Mar 13, 2015
(Mar 13, 2015 11:36 AM)хакер. Wrote: Use wpscan in Kali Linux. Does the job. but make sure to update the database first.
What do you mean update the database? And is there no way of using wpscan on Windows?
* - 11ssx1 - Mar 13, 2015
(Mar 13, 2015 11:58 AM)benny_boy Wrote: What do you mean update the database? And is there no way of using wpscan on Windows?
Try wpscan in kali .
or just search for it in win version .
may google be with you :)