Advertisement






Stanford University ( Longevity ) Wordpress Website BruteForce Attack

CVE Category Price Severity
CVE-2021-24351 CWE-798 $500 Critical
Author Risk Exploitation Type Date
Unknown High Remote 2017-09-08
Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2017090054

Below is a copy:

Stanford University ( Longevity ) Wordpress Website BruteForce Attack-----------------------------------------------------------------------------------------
| Exploit Title : Stanford University ( Longevity ) | Wordpress Website BruteForce Attack
| Google Dork : site:stanford.edu inurl:/wp-content/
| Date : 08/09/2017
| Exploit Author : Mohammad Babaee
| Vendor Homepage : stanford.edu
| Software Link : stanford.edu
| Version : 1.0 
| Tested on : Windows10 , Firefox
|
|+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
| Proof of concept : Stanford University [ Brute Force Attack ]
|
| 1 - Search this Google Dork : site:stanford.edu inurl:/wp-content/
| 2 - Find The ( Longevity Subdomain ) of Stanford University 
| 3 - True Site : ( http://longevity.stanford.edu )
| 4 - Now , We Have a website with low security ! :)
| 5 - This Site is using ( wordpress CMS ) Ver : 4.8.1 | Without Security measures !
| 6 - Defult Pages are avalable , you can see : readme.html , install.php , wp-login , wp-admin !
| 7 - Note : Username is ( admin ) & Adminpage is : ( http://longevity.stanford.edu/wp-login.php ) 
| 6 - The End , BruteForce This Site & Enjoy Of Hacking ...!
|
| 
| DEMO :
|
| http://longevity.stanford.edu/wp-login.php | username : admin | password : BruteForce to find ! | [BruteForce Attack VULNERABILITY]
|
|
|
|
|   +++  Discovered by : Mohammad Babaee  |  Don't forget me ...!  |  I will come back soon :)                                                                        
|
|
-----------------------------------------------------------------------------------------


Copyright ©2024 Exploitalert.

This information is provided for TESTING and LEGAL RESEARCH purposes only.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use and Privacy Policy and Impressum