+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: WP Pwner - Basic tools to PWN a WordPress (/showthread.php?tid=6233057)
WP Pwner - Basic tools to PWN a WordPress - ๖ۣۜAlexander - Feb 11, 2023
You guys ain’t worth this
If a mod sees this, delete it
RE: WP Pwner - Basic tools to PWN a WordPress - 73SLA - Feb 11, 2023
What do you want to say?
You created a virtual server on a virtual machine... where you installed wordpress. Then you created a shell-based code that injects wp-admin and creates an account with username and password. You see, this username must not be indexed by wordpress and the server. He must act as a spy who sneaks under a username on the forum and uses his access data on the forum: the decrypted username and password.
Now test this code on a real site!
And see what happens!
Interesting!
RE: WP Pwner - Basic tools to PWN a WordPress - ๖ۣۜAlexander - Feb 11, 2023
(Feb 11, 2023 07:59 AM)73SLA Wrote: What do you want to say?
You created a virtual server on a virtual machine... where you installed wordpress. Then you created a shell-based code that injects wp-admin and creates an account with username and password. You see, this username must not be indexed by wordpress and the server. He must act as a spy who sneaks under a username on the forum and uses his access data on the forum: the decrypted username and password.
Now test this code on a real site!
And see what happens!
Interesting!
what the fuck you on about? half of your post doesn’t make any sense.
i tested it on a real wordpress and it worked. i don’t get your point.
RE: WP Pwner - Basic tools to PWN a WordPress - 73SLA - Feb 11, 2023
Then post how you tested this on a real site not on a virtual machine!!
RE: WP Pwner - Basic tools to PWN a WordPress - ๖ۣۜAlexander - Feb 11, 2023
(Feb 11, 2023 08:28 AM)73SLA Wrote: Then post how you tested this on a real site not on a virtual machine!!
i uploaded the plugin just as i did on my vm?
please just gtfo if u dont know shit
i made the plugin bc i gained access to an admin wp account but needed to dump the db, so i decided to create the plugin and added some other features
RE: WP Pwner - Basic tools to PWN a WordPress - 73SLA - Feb 11, 2023
You dont get it! Im srry 4 u!
later edit : the code is prohibited and infected with malware! be careful!
RE: WP Pwner - Basic tools to PWN a WordPress - ๖ۣۜAlexander - Feb 11, 2023
(Feb 11, 2023 08:34 AM)73SLA Wrote: later edit : the code is prohibited and infected with malware! be careful!
dude lmao you can literally look at the source code