Hey. I'm trying to learn how to hack wordpress sites.
I've used Burpsuite - the site I want to hack has a shit ton of vulnzelobilities. I also know where the secret login page is - the site is so lazy they never changed from the wordpress default. Cloudflare is also running around on the site.
From here I can't figure out how to inject SQL, how to steal a cookie, or even how to download the database. What I want to do is get into the site on the backend.
Can anyone point me in the right direction so I can learn how to do this?
Thanks.
I've used Burpsuite - the site I want to hack has a shit ton of vulnzelobilities. I also know where the secret login page is - the site is so lazy they never changed from the wordpress default. Cloudflare is also running around on the site.
From here I can't figure out how to inject SQL, how to steal a cookie, or even how to download the database. What I want to do is get into the site on the backend.
Can anyone point me in the right direction so I can learn how to do this?
Thanks.
assword" that kind of shit. They also might have vulnzeloble ports open possibly if you havent checked for that you should check it out. Theres a good amount of things you could do with vulnzeloble ports. Cloudflare might be your only problem.
