• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

LinuxSec Exploit

Nothing is Ever Locked

  • XSS Payloads
  • About Us

Bypass Halaman Login WordPress yang di Redirrect

June 12, 2014 by Jack Wilder 7 Comments

Jadi ceritanya tadi iseng iseng dapet config masterweb ( server Indo ) , udah di symlink, udah masuk MySQL Interface, eh pas web nya mau di eksekusi ternyata halaman loginnya gak bisa diakses . Webnya pake WordPress. Loginnya disembunyikan. Jadi setiap diakses wp-login.php selalu redirrect ke index.php . pas ditest /wp-admin/ url nya tetep , tapi tampilannya tetep tampilan index.php .

Problem nya gan .

Akhir nya gue berasumsi nih situs pasti pake plugins . Entah plugins apa nama nya .
Ane cari deh kolom active_plugins di wp_options.

Selanjut nya , karena ane gak tau plugins apa yang dipake, hapus aja value dari active_plugins . Semuanya !

Dan sekarang coba masuk ke wp-login.php . 😀

JEBRETTTT !!!!
kebuka !

NB : cara ini hanya bisa dilakukan jika web tersebut mengguakan plugins, bukan settingan .htaccess .
Jadi saya sarankan buat para webmaster, jangan etrlalu mengandalkan plugins. Mending pakai .htaccess . Saya tau mungkin alasan kalian menggunakan plugins karena lebih simpel , gak ribet karena tinggal install . tapi kekurangannya, plugins terhubung dengan database . Jadi jika config nya kena, percuma plugins yang kalian pasang tidak akan berfungsi apa apa . 😉

Sekian dari saya, semoga bermanfaat .

Filed Under: Uncategorized Tagged With: Hacking, How To, Security

Reader Interactions

Comments

  1. Anonim says

    June 15, 2014 at 7:34 am

    Ӏf үoս wаnt youг house theater tо be tɦe best in the neighborhood thеn you сertainly ѡill not miѕs
    the opportunity tо purchase tɦe Blu-ray disc players. Тhe competitor waѕ HD DVD and ɑfter its inception a
    format war Ьegan. Ӏt produces grеat image quality of many
    Blu-ray discs.

    ʜere іs my web-site Best Blu-Ray Player Review

    Reply
  2. Anonim says

    June 15, 2014 at 10:59 pm

    Your style is really unique in comparison to
    other folks I've read stuff from. I appreciate you for
    posting when you have the opportunity, Guess I will just book
    mark this page.

    Here is my blog post best only

    Reply
  3. Anonim says

    June 16, 2014 at 12:31 am

    I don’t even know how I ended up here, but I
    thought this post was good. I do not know who you are but definitely you're going to
    a renowned blogger in case you aren’t already All the best!

    My page – Best Acne Products (www.pilpi.com)

    Reply
  4. Anonim says

    June 16, 2014 at 7:39 pm

    Hi there, after reading this remarkable paragraph i am too glad
    to share my know-how here with friends.

    Also visit my web site; movers and packers delhi

    Reply
  5. Anonim says

    June 17, 2014 at 6:31 am

    This site certainly has all of the information I wanted about this subject and didn't
    know who to ask.

    My webpage :: best cash for wrecks las vegas nv

    Reply
  6. Anonim says

    June 17, 2014 at 1:15 pm

    I am not actually superb with English however I find this real
    easy to comprehend.

    Here is my web site – Best Acne Treatment

    Reply
  7. Anonim says

    June 17, 2014 at 6:52 pm

    If yߋu'ге going in knowing what yoս'rе looking for, it will not be difficult tօ fіnd tɦe
    perfect electric shaver on youг needs. So, ߋne needs to produce sսre they are seeking the
    shaver tҺat wіll shave wіtҺ maximum performance witҺ little effort.

    Тhе оne using a rotary head іs qսite much cheaper
    tҺan the one utilizing а foil head bսt is a lot better
    if applied to lengthier hair.

    mү website best budget electric shaver

    Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Popular Post

Mass Deface setelah Rooting Server

Exploit WordPress Plugin WP Mobile Edition Local File Disclosure Vulnerability

Heroku Custom Domain or Subdomain Takeover

GitHub Custom Domain or Subdomain Takeover

Woocommerce Custom Tshirt Desginer CSRF Shell Upload Vulnerability

Hack Targeted Website using Reverse IP

Azure Traffic Manager Custom Domain or Subdomain Takeover

Shopify Custom Domain or Subdomain Takeover

WordPress 4.7.0/4.7.1 Content Injection Exploit

Deface WordPress dengan Exploit WordPress Plugins WPShop File Upload Vulnerability

LinuxSec / 16 queries in 0.12 seconds