[Geneon]

Let's suppose I've got access to wp-config.php, I've got the DB login, the authkey, salts, etc.

What can I do to get access to the website?

Is there any script to bruteforce admin with the salts?

[Geneon]

Shi, dude, well, thank you for the long informative post, I knew all that, but the problem is that you can't use DBkiss or any other script for that matter.

You can't connect to a DB externally.

One of the methods I knew it would work, is like you said, 80%+ of the admin username is: admin

So, since I've got wp-config authkey/salts, would be interesting to code or find a script like hashcat or something, that could crack the admin password with the help of those authkey/salt, it would take probably 1 week to find the password.