[Skidy]

I've got a URL that displays a 0 when I go to this : www.examplewebsite.com/wp-admin/admin-ajax.php | What is the exloit for this?

[Delevingne]

I think it displays boolean(false) which equals to 0, because you are not administrator. I'm not sure tho.

[Skidy]

I think it displays boolean(false) which equals to 0, because you are not administrator. I'm not sure tho.

yeah, I've tried the method where you put: wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php and download their database but it doesn't work. Any other way of getting access?

---

I think it displays boolean(false) which equals to 0, because you are not administrator. I'm not sure tho.

in the source code it has this:

Code

        <input type="submit" name="wp-submit" id="wp-submit" class="button button-primary button-large" value="Log In" />
        <input type="hidden" name="redirect_to" value="https://example.org.uk/wp-admin/" />
        <input type="hidden" name="testcookie" value="1" />

This is on the login page.. Could I try and set the value to 1???

---

I think it displays boolean(false) which equals to 0, because you are not administrator. I'm not sure tho.

Oh and

Code

/* <![CDATA[ */
var imgmap = {"ajaxurl":"https:\/\/example.org.uk\/wp-admin\/admin-ajax.php","pulseOption":"first_time","admin_logged":"","alt_dialog":"1"};
/* ]]> */

So, could I do anything with this?

[runnerup]

Try and find out what plugins the site is using then find exploits for those plugins.

h t t p : / / wppluginchecker . earthpeople . se/

Sorry about the spaces I'm not allowed to post links.

[Skidy]

Try and find out what plugins the site is using then find exploits for those plugins.

h t t p : / / wppluginchecker . earthpeople . se/

Sorry about the spaces I'm not allowed to post links.

Any ideas on exploiting plugins?? How would I exploite them?

---

[img]http://screenshu.com/static/uploads/temporary/e1/tl/ia/i2kov9.jpg[/img]

Any exploits from those?

[SIM-209986]

Use wpscan in Kali Linux. Does the job. but make sure to update the database first.

[Skidy]

Use wpscan in Kali Linux. Does the job. but make sure to update the database first.

What do you mean update the database? And is there no way of using wpscan on Windows?

[11ssx1]

What do you mean update the database? And is there no way of using wpscan on Windows?

Try wpscan in kali .
or just search for it in win version .

may google be with you :)