[Nayan]

Hey sorry if its newbie question but recently learned some sql techniques and I created a login page in wordpress using jquery ajax.
my questions are how do I bypass or sql inject the login page.

[compalabee]

Hey sorry if its newbie question but recently learned some sql techniques and I created a login page in wordpress using jquery ajax.
my questions are how do I bypass or sql inject the login page.

I think Wordpress has pre-set SQLi protection mechanisms (that's why Wordpress vulns include SQLi)

Also jQuery has its own CVE space (doesn't it? Not sure) so you end up needing to tackle a specific version of jQuery just to manage an SQLi on it.

tl;dr Try another endpoint I guess?

[Nayan]

I think Wordpress has pre-set SQLi protection mechanisms (that's why Wordpress vulns include SQLi)

Also jQuery has its own CVE space (doesn't it? Not sure) so you end up needing to tackle a specific version of jQuery just to manage an SQLi on it.

tl;dr Try another endpoint I guess?

So I need to find the jquery version the site is using and then I can attempt one sql?
Also what do you mean by try another endpoint ?To try another method?

[compalabee]

So I need to find the jquery version the site is using and then I can attempt one sql?
Also what do you mean by try another endpoint ?To try another method?

Not sure about hacking jQuery but I think earlier versions don't have the protection mechanisms to protect against SQLi.

As for other endpoints, in my experience, when I hack Wordpress with SQLi I look for a PHP file that looks similar to this (but not always the same)

PHP Code


<?php 
/index.php?var=1 


Then add the SQL queries at the end, like

PHP Code


<?php 
/index.php?var=1' or yadayada 


[l4stl00k]

I prefer to get some vuln link try that

[BigJoe7413]

Hey sorry if its newbie question but recently learned some sql techniques and I created a login page in wordpress using jquery ajax.
my questions are how do I bypass or sql inject the login page.

very rare to find a sqli in jquery itself, Best you're going to get is XSS. Wordpress login pages tend to be very secure, Try look for an outdated plugin