[Help] How to hack a wordpress site.

[ShitCanBeer]

Hey. I'm trying to learn how to hack wordpress sites.

I've used Burpsuite - the site I want to hack has a shit ton of vulnerabilities. I also know where the secret login page is - the site is so lazy they never changed from the wordpress default. Cloudflare is also running around on the site.

From here I can't figure out how to inject SQL, how to steal a cookie, or even how to download the database. What I want to do is get into the site on the backend.

Can anyone point me in the right direction so I can learn how to do this?

Thanks.

 

[s0crates]

Since the site is so barebones default from the owner, have you tried logging in with default logins. "admin:admin", "adminassword" that kind of shit. They also might have vulnerable ports open possibly if you havent checked for that you should check it out. Theres a good amount of things you could do with vulnerable ports. Cloudflare might be your only problem.

 

[prodyguns]

Hit up norsekingz on Telegram

 

[ExpertiseBoy]

Reach this guy @Marly210 at telegram
He might help you in this regard