+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Wordpress Attacks (/showthread.php?tid=6113662)
Wordpress Attacks - Saburu_Arisaka - Oct 4, 2020
Was running your usual scans and decided to hit it with a web crawler. The crawler returned the wordpress login page for the admin of the site.
I though about using hydra or something, but I'm not sure.
Anyone have any ideas?
RE: Wordpress Attacks - The Amazing Sinner - Oct 4, 2020
You can run a dictionary attack with WPScan, have you heard of that?
First, you have to enumerate the WordPress users.
The WordPress user enumeration tool is used the retrieve a list of registered WordPress users for the target host:
Code
wpscan –url [wordpress url]–enumerate uUse the following command to brute force the password for user root:
Code
wpscan –url [wordpress url]–wordlist [path to wordlist]–username [username to brute force]–threads [number of threads to use]RE: Wordpress Attacks - Saburu_Arisaka - Oct 4, 2020
I will try this an let you know how it turns out. Is it possible to run it with proxychains?
RE: Wordpress Attacks - The Amazing Sinner - Oct 4, 2020
(Oct 4, 2020 07:36 AM)Saburu_Arisaka Wrote: I will try this an let you know how it turns out. Is it possible to run it with proxychains?
Yes sir, I have a tutorial on how to use proxychains in Kali Linux.
https://hackforums.net/showthread.php?tid=6105052
Cheers.