[#1] PURE RAT v4 // BEST HVNC RAT ◆ ProxiesFood: Unlimited Residential Proxy ◆ Spoof Call and Spoof SMS set any caller ◆ Private Crypter - Unique Private Stubs ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › Resetting WP password via SQLi vuln ?

New Reply 

Resetting WP password via SQLi vuln ?
kuramiqnko
kuramiqnko Offline
[n00b@HF:]
*
Registered
Posts:
12
Threads:
4
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
1
May 30, 2020 07:16 AM
Hey guys, I would like to ask someone experienced with wordpress, lets say I have access to an database(s) with wordpress sites, and I can see the wp_users table with passwords and everything, is there any way to reset the password via the Forgotten password and then access reset token via the database which I have gained access via SQL injection vulnerability ?
Thanks for the help !
!!*-Ir0nMan™*-!!
!!*-Ir0nMan™*-!! Offline
Chosen
**
HF Ub3r
Posts:
479
Threads:
101
Credibility:
300
Popularity:
261
βytes:
β 0
Game XP:
0
May 30, 2020 09:52 AM
(May 30, 2020 07:16 AM)kuramiqnko Wrote:  Hey guys, I would like to ask someone experienced with wordpress, lets say I have access to an database(s) with wordpress sites, and I can see the wp_users table with passwords and everything, is there any way to reset the password via the Forgotten password and then access reset token via the database which I have gained access via SQL injection vulnerability ?
Thanks for the help !

it was possible before but now reset key is hashed as well. If you can alter the sql records then it is possible otherwise not.
  Contact Me for marketing emails, SEO, Anything Can get your any job done.

kuramiqnko
kuramiqnko Offline
[n00b@HF:]
*
Registered
Posts:
12
Threads:
4
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
1
May 30, 2020 12:48 PM
(May 30, 2020 09:52 AM)!!*-Ir0nMan™*-!! Wrote:  it was possible before but now reset key is hashed as well. If you can  alter the sql records then it is possible otherwise not.
I googled around and it said it was hashing the user activation key or I did not understand right ? If is that so, can I just hash the encryption key and get the reset code ?
!!*-Ir0nMan™*-!!
!!*-Ir0nMan™*-!! Offline
Chosen
**
HF Ub3r
Posts:
479
Threads:
101
Credibility:
300
Popularity:
261
βytes:
β 0
Game XP:
0
May 31, 2020 02:02 PM
(May 30, 2020 12:48 PM)kuramiqnko Wrote:  I googled around and it said it was hashing the user activation key or I did not understand right ? If is that so, can I just hash the encryption key and get the reset code ?

the time u finish cracking the hash it will expire.
  Contact Me for marketing emails, SEO, Anything Can get your any job done.

frank3nstien
frank3nstien Offline
[closed@HF:]
Posts:
548
Threads:
54
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
2,506
May 31, 2020 07:44 PM
This is how reset token works on Wordpress

Code
check_password_reset_key( string $key, string $login )

this token is generated by hashing a random string. when token is generated it is stored in the users table in the user_activation_key column and Only the most recently generated token is stored, The token is also removed from the database once used.

If you are looking to send these token using sqli, you can generate them by trying

Code
get_password_reset_key()

This function accepts a WP_User object as its argument
MahonStoN_
MahonStoN_ Offline
[n00b@HF:]
*
Registered
Posts:
24
Threads:
0
Credibility:
100
Popularity:
0
βytes:
β 0
Game XP:
5
Jun 6, 2020 03:51 AM
try to alter the sql records as the guy above me said already.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by CybercashJan 5, 2022 02:08 PM 6 457 Jan 5, 2022 02:08 PM
Last Post: Cyber "Max" Shaman
by timOct 27, 2016 11:49 PM 3 227 Oct 27, 2016 11:49 PM
Last Post: HiddenEyE
by RoutessOct 27, 2016 04:13 AM 78 2,749 Oct 27, 2016 04:13 AM
Last Post: oneceno