hacking: security in practice
Exploiting WordPress site with no vulnerable plugins

Hi, I'm doing a CTF on a WordPress site but WPscan shows no vulnerable plugins/themes. I have one username and wp-login page, but I'm told that brute-forcing is not required for this box. There aren't any weird directories found via enumeration, and robots.txt only contains a line on wp-admin/admin-ajax.php.

In my experience with exploiting WordPress, usually finding something vulnerable in WPscan shows me which way to go, but now I'm stumped. Does anyone have any ideas, or is this a red herring?

submitted by /u/Slayre77
[link] [comments]

Hacking on Medium
BurpSuite Add all subdomains to scope

https://cdn-images-1.medium.com/max/1098/1*iYTHBv9-l4bvdc4fi40KZA.png
If the target is TARGET.COM then do the following to update all subdomains to scope:

Continue reading on Medium »

Hacking on Medium
Don’t Overreact Walkthrough | HackTheBox

https://cdn-images-1.medium.com/max/703/1*InVltw00fpTkKOtiw-GRxw.png
Challenge name : Don’t Overreact

Continue reading on Medium »

Hacking on Medium
How to Build a Port Scanner In Python

https://cdn-images-1.medium.com/max/2048/0*XNvKM1tpEwB74rSt.jpg
TL;DR- A guide on creating a simple port scanner in Python which can be modified to your needs depending on the complexity of the network.

Continue reading on The Gray Area »

Hacking on Medium
RootMe | Try Hack Me

https://cdn-images-1.medium.com/max/1043/1*b0CbRh2WRSd9lFsKBVphzA.png
Before we dive into the box lets talk about the website that hosts it. The website tryhackme.com is devoted to educating the hacker…

Continue reading on Medium »

Hacking on Medium
SIM Cloning 101: The Basics and Beyond

https://cdn-images-1.medium.com/max/728/1*zuizTt_EBfVEFU962X9uJg.jpeg
SIM cloning is the process of creating a duplicate copy of a subscriber identity module (SIM) card. This is usually done by copying the…

Continue reading on Medium »

Hacking on Medium
Learn web3/smart-contract Hacking in 2023 step by step guide

https://cdn-images-1.medium.com/max/2600/0*TtUfbaA_vWZV_-v2
If you are a beginner in web3 security space and want to learn from start. Then I have compiled a step by step guide for 2023 version :-

Continue reading on Medium »

Hacking on Medium
Tips for Becoming a Proficient Bug Bounty Hunter

https://cdn-images-1.medium.com/max/600/1*fkhuU-5-m5GDOpQBLgVlWg.jpeg
How to Become a Bug Bounty Hunter

Continue reading on Medium »

Hacking on Medium
Glitch Analyzing: Exploring the “Storage” bug class in Video Games and the power of Flag…

https://cdn-images-1.medium.com/max/600/1*F1wr5bPQK6okBqew9R1wzQ.png
In this first episode of my Glitch Analyzing series I want to analyze and research one of the most interesting bugs found in video games…

Continue reading on Medium »

Hacking on Medium
Anonymous Walkthrough | TryHackMe

https://cdn-images-1.medium.com/max/1366/1*mLGu6d8iu4s8VEPTiJ7MPQ.png
Port scanning:

Continue reading on Medium »

Hacking on Medium
Love Virus: A Billion Dollar Disaster

https://cdn-images-1.medium.com/max/1172/1*Sx6MLUEtUV642KAhuFVVUA.png
Uncovering the Origins and Aftermath of the “I Love You” Virus: A Look into the Billion Dollar Disaster that shook the world in 2000

Continue reading on Geek Culture »

Learn web3/smart-contract Hacking in 2023 step by step guide

If you are a beginner in web3 security space and want to learn from start. Then I have compiled a step by step guide for 2023 version :-Continue reading on Medium »
Read more...

BurpSuite Add all subdomains to scope

If the target is TARGET.COM then do the following to update all subdomains to scope:Continue reading on Medium »
Read more...

Learn web3/smart-contract Hacking in 2023 step by step guide
https://hackash.medium.com/learn-web3-smart-contract-hacking-in-2023-step-by-step-guide-dbc4f7a16902?source=rss------bug_bounty-5