Spoof Call and Spoof SMS set any caller ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Private Crypter - Unique Private Stubs ◆ ProxiesFood: Unlimited Residential Proxy ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Beginner Hacking › Unsecure Wordpress site access

New Reply 

Unsecure Wordpress site access
Cosmozic
Cosmozic Offline
[n00b@HF:]
*
HF l33t
Posts:
22
Threads:
2
Credibility:
100
Popularity:
58
βytes:
β 0
Game XP:
0
Jan 4, 2024 03:19 PM
Hi Im not an expert by any means Im trying to gain access to a wordpress site, so far I have 3 Usernames and found 2 vulnerabilities (CVE-2022-3144 and CVE 2023-38400 there might be more but thats as far as I currently have) and and i assume xmlrpc is enabled too as it says server accepts POST requests only.

Site uses http so it has no ssl certificate either.

So far thats the progress and Im unsure what to do next other than asking for help here.
DramaKing
DramaKing Online
[root@HF:]
**********
Legends
Posts:
13,547
Threads:
167
Credibility:
2800
Popularity:
950
βytes:
β 38,856
Game XP:
441,421
Jan 4, 2024 04:28 PM
(Jan 4, 2024 03:19 PM)Cosmozic Wrote:  Hi Im not an expert by any means Im trying to gain access to a wordpress site, so far I have 3 Usernames and found 2 vulnerabilities (CVE-2022-3144 and CVE 2023-38400 there might be more but thats as far as I currently have) and and i assume xmlrpc is enabled too as it says server accepts POST requests only.

Site uses http so it has no ssl certificate either.

So far thats the progress and Im unsure what to do next other than asking for help here.

Neither of those will help if you're trying to get access to the website, especially if cookies have the HttpOnly flag set.
Cosmozic
Cosmozic Offline
[n00b@HF:]
*
HF l33t
Posts:
22
Threads:
2
Credibility:
100
Popularity:
58
βytes:
β 0
Game XP:
0
Jan 4, 2024 04:32 PM
(Jan 4, 2024 04:28 PM)DramaKing Wrote:  Neither of those will help if you're trying to get access to the website, especially if cookies have the HttpOnly flag set.

I plan to get access to the admin panel, what else can I use?
DramaKing
DramaKing Online
[root@HF:]
**********
Legends
Posts:
13,547
Threads:
167
Credibility:
2800
Popularity:
950
βytes:
β 38,856
Game XP:
441,421
Jan 4, 2024 04:35 PM
(Jan 4, 2024 04:32 PM)Cosmozic Wrote:  I plan to get access to the admin panel, what else can I use?

You can use a password cracker.
Cosmozic
Cosmozic Offline
[n00b@HF:]
*
HF l33t
Posts:
22
Threads:
2
Credibility:
100
Popularity:
58
βytes:
β 0
Game XP:
0
Jan 4, 2024 04:41 PM
(Jan 4, 2024 04:35 PM)DramaKing Wrote:  You can use a password cracker.

I tried bruteforcing no luck sadly
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by zenw0Mar 2, 2021 01:21 PM 1 151 Mar 2, 2021 01:21 PM
Last Post: Super
by Nyx IVAug 17, 2020 11:59 AM 0 74 Aug 17, 2020 11:59 AM
Last Post: Nyx IV
by seemsnodeJul 11, 2017 01:43 PM 1 93 Jul 11, 2017 01:43 PM
Last Post: SysAdmin