[mixer]

what are the chances of finding passwords of a wordpress website using breached credentials?
since wordpress automatically generates passwords, i personally don't think many people will change it to a simple password that they use everywhere. should i try my luck with randomly generated passwords or use breached credentials?

[Dystortion]

Honestly if you're attacking wordpress - credentials aren't the way IMO. It's so vulnerable especially through its plugins, there will always be another way in.

[mixer]

Honestly if you're attacking wordpress - credentials aren't the way IMO. It's so vulnerable especially through its plugins, there will always be another way in.

I'm starting to totally give up on web attacks and focus on SE.

[Dystortion]

I'm starting to totally give up on web attacks and focus on SE.

Web attacks are still highly prominent - if you're hitting more niche targets like APIs which isn't as common as people looking for XSS or SQLi

[video edit/ not live]

i need help with same thing

---

if some one could msg me and help that would be great for a wordpress admin pw, i have the username and email, just no pw

[SilentNuke]

you will need to find out if the wordpress instalation has its security for admin logins enabled..

if it says "username or password is incorrect" and youve found an admin account username, then the chances are they have enabled both hide valid usernames and giving you only x amount of chances before blocking you.

if is says "password for account x is invalid", then they havent activated the security settings.

[video edit/ not live]

it said paasword invalid. i know its the owner of companies log in email is user name, if that helps

[pr0xed]

if you want to bruteforce it you should first find a registered email or username to make this easier and then use tools like wpscan for the bruteforce process

[Money-]

if you want to bruteforce it you should first find a registered email or username to make this easier and then use tools like wpscan for the bruteforce process

Gotta consider some rate limits. Do you have any interesting wordpress bruteforcer tools?

[pr0xed]

Gotta consider some rate limits. Do you have any interesting wordpress bruteforcer tools?

use burpsuite or wpscan (both come preinstalled in kali and most of the pentesting os) or you could just get the cracked version for burpsuite for faster bruteforce attacks since wpscan is pretty slow so is the burpsuite community edition.

[person123!]

I've had luck just downloading random password lists and trying all of them

[DarkRoot]

100 percent chance, it's weird you haven't found it yet.