+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [Tutorial] How to get wordpress login usernames (/showthread.php?tid=5657214)
Pages: Pages
1
2
[Tutorial] How to get wordpress login usernames - Mr. Robot - Jun 27, 2017
Really simple way to find wordpress login usernames so let's keep this short.
So for this we are just going to google "/wp-admin" to find some sites that are running wordpress. Just easier to find some that way.
Next we want to open up Kali linux and run (it's already installed)
Code
wpscan -u www.jaimedicalsystems.com --enumerate uReplace "www.jaimedicalsystems.com" with the website you wish to enumerate usernames for.
Using this can give you emails and/or usernames leaked in databases - for example we can assume based on the below image:
[email protected]
![[Image: RJWHOs6.png]](https://i.imgur.com/RJWHOs6.png)
* - Cimex - Jun 27, 2017
Cool tutorial sir. Keep up the neat job with the contributions.
* - Mr. Robot - Jun 27, 2017
(Jun 27, 2017 08:45 PM)Cimex Wrote: Cool tutorial sir. Keep up the neat job with the contributions.
Just some basic shit to help bruteforces and whatnot.
* - Cimex - Jun 27, 2017
(Jun 27, 2017 08:56 PM)Mr. Robot Wrote: Just some basic shit to help bruteforces and whatnot.
Yeah but basics always help.
* - Mr. Robot - Jun 28, 2017
(Jun 27, 2017 09:06 PM)Cimex Wrote: Yeah but basics always help.
Always a stepping stone in the right direction.
* - bysilents11 - Jun 28, 2017
Great tutorial thank you for this!
* - FearInflictor - Jul 31, 2017
This may come in handy.... has anyone had luck with sql injection for wordpress sites?
* - Mr. Robot - Jul 31, 2017
(Jul 31, 2017 11:43 PM)FearInflictor Wrote: This may come in handy.... has anyone had luck with sql injection for wordpress sites?
Each site has its own vulns.
* - Th3_Cr0w - Aug 6, 2017
Mr. Robot, thank you for your tutorial! :D
* - Mr. Robot - Aug 6, 2017
(Aug 6, 2017 12:36 PM)Th3_Cr0w Wrote: Mr. Robot, thank you for your tutorial! :D
Hey bud no problem, very simple but effective.
* - GhostLikesToast - Aug 8, 2017
Thank you for the tutorial sir. What kind of things are possible to accomplish with peoples Wordpress usernames? Feel free to PM me an answer if that's easier for you 🤝
* - Mr. Robot - Aug 8, 2017
(Aug 8, 2017 06:52 AM)GhostLikesToast Wrote: Thank you for the tutorial sir. What kind of things are possible to accomplish with peoples Wordpress usernames? Feel free to PM me an answer if that's easier for you 🤝
You can use the usernames to associate emails such as [email protected] Or you can try bruteforce the wordpress login using their username.
In the example above I posted how the email layout would look.
* - tgismadi - Aug 9, 2017
hey bud...nice tutorial.
if some web like --->
www
abcde123
blogspot
com
i assume this belong to blogger com right?
how to know the admin email?
RE: *asd - Mr. Robot - Jun 8, 2018
(Aug 9, 2017 07:50 PM)tgismadi Wrote: hey bud...nice tutorial.
if some web like --->
www
abcde123
blogspot
com
i assume this belong to blogger com right?
how to know the admin email?
You will have to do a bit more work to find it.
RE: [Tutorial] How to get wordpress login usernames - gotta go - Jun 13, 2018
Thank you sir, that looks useful to me.