Hacking WordPress | Hack The Box Preignition

In most environments, web servers play a big part in the infrastructure and in the daily processes of many departments. Web servers can sometimes be used strictly internally by employees, but most of the time can be found to be public-facing, meaning anyone from the Internet can access them to retrieve information and files from their hosted web pages. For the most part, the web pages hosted on the web servers are managed through their administrative panels, locked behind a log-in page.


Once you, as an administrator of the WordPress site, log into its' admin panel, we will have access to a myriad of controls, ranging from content uploading mechanisms, to theme selection, custom script editing for specific pages, and more. We conclude that Web enumeration, specifically directory busting (dir busting), is one of the most essential skills any Penetration Tester must possess. While manually navigating websites and clicking all the available links may reveal some data, most of the links and pages may not be published to the public and, hence, are less secure. Suppose we did not know the wp-admin page is the administrative section of the WordPress site we exemplified above.


#pentesting #pentester #hacking #DBHACK
#REDISHACK #informationsecurity #hackthebox #THRYHACKME #tryhard #cybersecurity #webappHacking #WordPressHack