+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: wp-config.php what now? (/showthread.php?tid=4953314)
wp-config.php what now? - Geneon - Aug 17, 2015
Let's suppose I've got access to wp-config.php, I've got the DB login, the authkey, salts, etc.
What can I do to get access to the website?
Is there any script to bruteforce admin with the salts?
* - Geneon - Aug 18, 2015
Shi, dude, well, thank you for the long informative post, I knew all that, but the problem is that you can't use DBkiss or any other script for that matter.
You can't connect to a DB externally.
One of the methods I knew it would work, is like you said, 80%+ of the admin username is: admin
So, since I've got wp-config authkey/salts, would be interesting to code or find a script like hashcat or something, that could crack the admin password with the help of those authkey/salt, it would take probably 1 week to find the password.