Spoof Call and Spoof SMS set any caller ◆ ZexoCard: no-KYC virtual crypto cards ◆ Traffic service & campaign optimization ◆ Private Crypter - Unique Private Stubs ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Beginner Hacking Hacking Tutorials › [Tutorial] How to get wordpress login usernames

New Reply 

[Tutorial] How to get wordpress login usernames
Mr. Robot
Mr. Robot Away
[closed@HF:]
Posts:
37,840
Threads:
3,327
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
35,672
Jun 27, 2017 08:43 PM
Really simple way to find wordpress login usernames so let's keep this short.

So for this we are just going to google "/wp-admin" to find some sites that are running wordpress. Just easier to find some that way.

Next we want to open up Kali linux and run (it's already installed)

Code
wpscan -u www.jaimedicalsystems.com --enumerate u

Replace "www.jaimedicalsystems.com" with the website you wish to enumerate usernames for.
Using this can give you emails and/or usernames leaked in databases - for example we can assume based on the below image:

[email protected]

[Image: RJWHOs6.png]
Cimex
Cimex Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,079
Threads:
60
Credibility:
000
Popularity:
9
βytes:
β 0
Game XP:
0
Jun 27, 2017 08:45 PM
Cool tutorial sir. Keep up the neat job with the contributions.
[Image: Btc2oyr.gif]

Mr. Robot
Mr. Robot Away
[closed@HF:]
Posts:
37,840
Threads:
3,327
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
35,672
Jun 27, 2017 08:56 PM
(Jun 27, 2017 08:45 PM)Cimex Wrote:  Cool tutorial sir. Keep up the neat job with the contributions.

Just some basic shit to help bruteforces and whatnot.
Cimex
Cimex Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,079
Threads:
60
Credibility:
000
Popularity:
9
βytes:
β 0
Game XP:
0
Jun 27, 2017 09:06 PM
(Jun 27, 2017 08:56 PM)Mr. Robot Wrote:  Just some basic shit to help bruteforces and whatnot.

Yeah but basics always help.
[Image: Btc2oyr.gif]

Mr. Robot
Mr. Robot Away
[closed@HF:]
Posts:
37,840
Threads:
3,327
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
35,672
Jun 28, 2017 01:30 AM
(Jun 27, 2017 09:06 PM)Cimex Wrote:  Yeah but basics always help.

Always a stepping stone in the right direction.
bysilents11
bysilents11 Offline
[n00b@HF:]
*
Registered
Posts:
29
Threads:
3
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jun 28, 2017 06:52 AM
Great tutorial thank you for this!
FearInflictor
FearInflictor Offline
[n00b@HF:]
*
Registered
Posts:
39
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 19
Game XP:
0
Jul 31, 2017 11:43 PM
This may come in handy.... has anyone had luck with sql injection for wordpress sites?
Mr. Robot
Mr. Robot Away
[closed@HF:]
Posts:
37,840
Threads:
3,327
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
35,672
Jul 31, 2017 11:46 PM
(Jul 31, 2017 11:43 PM)FearInflictor Wrote:  This may come in handy.... has anyone had luck with sql injection for wordpress sites?

Each site has its own vulns.
Th3_Cr0w
Th3_Cr0w Offline
[n00b@HF:]
*
Registered
Posts:
1
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Aug 6, 2017 12:36 PM
Mr. Robot, thank you for your tutorial! :D
Mr. Robot
Mr. Robot Away
[closed@HF:]
Posts:
37,840
Threads:
3,327
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
35,672
Aug 6, 2017 12:37 PM
(Aug 6, 2017 12:36 PM)Th3_Cr0w Wrote:  Mr. Robot, thank you for your tutorial! :D

Hey bud no problem, very simple but effective.
GhostLikesToast
GhostLikesToast Offline
<(D.D)>,,i,,<(@.@)>,,i,,<(C.C)>
***
HF Ub3r
Posts:
705
Threads:
69
Credibility:
501
Popularity:
152
βytes:
β 330.2
Game XP:
17
Aug 8, 2017 06:52 AM
Thank you for the tutorial sir. What kind of things are possible to accomplish with peoples Wordpress usernames? Feel free to PM me an answer if that's easier for you 🤝
Mr. Robot
Mr. Robot Away
[closed@HF:]
Posts:
37,840
Threads:
3,327
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
35,672
Aug 8, 2017 07:04 AM
(Aug 8, 2017 06:52 AM)GhostLikesToast Wrote:  Thank you for the tutorial sir. What kind of things are possible to accomplish with peoples Wordpress usernames? Feel free to PM me an answer if that's easier for you 🤝

You can use the usernames to associate emails such as [email protected] Or you can try bruteforce the wordpress login using their username.

In the example above I posted how the email layout would look.
tgismadi
tgismadi Offline
[n00b@HF:]
*
Registered
Posts:
3
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Aug 9, 2017 07:50 PM
hey bud...nice tutorial.
if some web like --->
www
abcde123
blogspot
com
i assume this belong to blogger com right?
how to know the admin email?
Mr. Robot
Mr. Robot Away
[closed@HF:]
Posts:
37,840
Threads:
3,327
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
35,672
Jun 8, 2018 05:25 AM
(Aug 9, 2017 07:50 PM)tgismadi Wrote:  hey bud...nice tutorial.
if some web like --->    
www
abcde123
blogspot  
com
i assume this belong to blogger  com right?
how to know the admin email?

You will have to do a bit more work to find it.
gotta go
gotta go Offline
[n00b@HF:]
*
Registered
Posts:
52
Threads:
4
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jun 13, 2018 11:22 PM
Thank you sir, that looks useful to me.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Isaac NewtonMay 21, 2024 04:54 AM 35 6,418 May 21, 2024 04:54 AM
Last Post: cyberaquila
by azeekkcMay 20, 2015 12:32 PM 2 1,007 May 20, 2015 12:32 PM
Last Post: BalakKoBack
by azeekkcMay 18, 2015 08:59 PM 0 399 May 18, 2015 08:59 PM
Last Post: azeekkc