Wordpress Hack Challenge Help

wp-scan

Which am i use wordlist? I used a lot of wordlist such as rockyou, seclist, metasploit pass lists but doesn’t work.

There are no problems with the system, I suggest you work on it again, if you have a wordlist on the desktop, use it, otherwise you can use rockyou.txt.

No have wordlist on the desktop and I used rockyou but doesn’t work. I will try reset the lab.

And one more thing, you are a moderator and I think you should change the answer formats for many labs. Sometimes I find the answer but I don’t write with the format. Because the formats are complicated and meaningless. As a suggestion, you can add formatting tips as you do in some labs.

1 Like

You can write your requests in the site feedback section, thank you

1 Like

@MoonCrack i determined username with /?author but when i try to bruteforce with hydra via rockyou.txt there is more than one password appear and all of them are wrong but hydra shows them as true. im so confused can you help me

Hello, if it is issuing more than one password, can you check the parameter again because there is a mistake in the parameter you gave?

I also tried it with metasploit, it took too long so I cancelled it. You can try Hydra and rockyou.txt, it finds it much faster with them.

1 Like