Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Wordpress Pass hashed, twice encryption

you got the hash using Sqli i don't know if it is still working but here is what you have to do :
get the email of the admin
go to wp-login.pph page and click on forgot password
enter the email and click on get new password
get the user_activation_key
wp-login.php?action=rp&key=resetkey&login=username
replace username and resetkey you got above.

hope it works
HeXagone
(Apr 10, 2015 06:00 PM)HeXagone Wrote:  you got the hash using Sqli i don't know if it is still working but here is what you have to do :
get the email of the admin
go to wp-login.pph page and click on forgot password
enter the email and click on get new password
get the user_activation_key
wp-login.php?action=rp&key=resetkey&login=username
replace username and resetkey you got above.

hope it works
HeXagone

This was patched in October of 2013...

https://core.trac.wordpress.org/changeset/25696


Possibly Related Threads...
Thread / Author Replies Views Last Post
by JavkJul 16, 2022 01:10 PM 3 223 Jul 16, 2022 01:10 PM
Last Post: Sitrep
by mObiIeFeb 16, 2018 07:10 AM 34 7,568 Feb 16, 2018 07:10 AM
Last Post: kamera
by rissa007Mar 28, 2017 03:51 PM 2 194 Mar 28, 2017 03:51 PM
Last Post: rissa007