+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Someone wants to be in a hacking team with me? (/showthread.php?tid=6101147)
Someone wants to be in a hacking team with me? - nimda228 - Aug 7, 2020
Hi, I am trying to hack a WordPress site. The website has limited login attempts. But fortunately xmlrpc.php file in enabled. I can use it to send multiple passwords in only one request. This way we can bypass limited login attempts. But the problem is that I have to first craft the link with multiple passwords. I am finding someone who has enough experience with WordPress hacking and programing. Reply if you think, you can be with me.
RE: Someone wants to be in a hacking team with me? - cyberdog1337 - Aug 8, 2020
(Aug 7, 2020 05:49 PM)nimda228 Wrote: Hi, I am trying to hack a WordPress site. The website has limited login attempts. But fortunately xmlrpc.php file in enabled. I can use it to send multiple passwords in only one request. This way we can bypass limited login attempts. But the problem is that I have to first craft the link with multiple passwords. I am finding someone who has enough experience with WordPress hacking and programing. Reply if you think, you can be with me.
Why don't you try to hack any shared server website then by symlink you can get access on your target
RE: Someone wants to be in a hacking team with me? - beeloggerb - Aug 28, 2020
how do you trust to people in here
they might be from Gov. agencies ??
i think you wanna get caught
ok ok Good Luck
have a nice flight
RE: Someone wants to be in a hacking team with me? - pushl %ebp - Sep 1, 2020
Use https://medium.com/@the.bilal.rizwan/wordpress-xmlrpc-php-common-vulnerabilites-how-to-exploit-them-d8d3c8600b32 to work out if it's vuln.
Then use something like https://github.com/aress31/xmlrpc-bruteforcer to bruteforce it??
If ya want to be stealth, make sure you don't be too aggressive. I work for a webhosting company and I've seen attacks like these bring servers down or set monitoring software off (Like nagios) alerting us to the attack.
Like cyberdog said too, use something like https://hackertarget.com/reverse-ip-lookup/ just incase there's something easier to hack on the same server.
RE: Someone wants to be in a hacking team with me? - Pereceh - Sep 2, 2020
how many thousand words do you have to bruteforce. 🤔