How easy to hack wordpress CMS on target server?

Posted by: bugishere on: May 22, 2011

• In: security | tips
• 187 Comments

OK. with me, I’m going to tell you how easy hack WordPress CMS if you’ve been uploaded the backdoor on the target website in one server. Firstly, I want to say that if there is one target website which have been uploaded the backdoor by attacker, so many moments that the attacker will do if the server isn’t secure. You must remember that one target website can represent  one server.  The second the scenario of this posting are Writer (Me) doesn’t give tutorial to upload backdoor in server and please don’t regard me as attacker or hacker cause I’m not attacker or hacker. I’m writing this posting only for informative purpose for the world that WordPress can easily hacked. I hope all involved people in WordPress can improve and be careful. These steps :

• Attacker who has been uploaded backdoor, is first step for exploitation all target websites on server.  On the world many kind of backdoors. So this one of picture of backdoor that attacker used:

• Yesterday, I  shared the database scanner . And this application can be used for seaching many types of configuration file on one server including WP-CONFIG.PHP (configuration file of WordPress CMS). In this step the attacker may run that application in one target website. Just upload that file and run it so many surprises.

• From scanning result, the attacker saw many configuration files from that server. so the detail like these :

[+] Founded 32 entrys in /etc/passwd
[+] Founded 32 readable public_html directories
[~] Searching for passwords in config.* files…

[+] /home/nizipli/public_html/erolnizipli/wp-config.php
MySQL database password
[+] /home/benito/public_html/catalog/classes/db.php
[+] /home/guildwar/public_html/gw/manager/includes/config.inc.php
ML>P7G&5^VA1
[+] /home/guildwar/public_html/gw/manager/media/ImageEditor/config.inc.php
ysql_connect($database_server, $database_user, $da
[+] /home/guildwar/public_html/blog/wp-config.php
ine(‘DB_PASSWORD’, ‘shd5kl8753sp
[+] /home/betterse/public_html/wp-config.php
MySQL database password *
[+] /home/bkumacom/public_html/config.php
t.GHz+pl,6aR
[+] /home/bellalea/public_html/djmixtips.com/wp-config.php
MySQL database password
[+] /home/bellalea/public_html/guitarlegendstv.com/wp-config.php
MySQL database password *
[+] /home/bellalea/public_html/artofpickingupwomen.info/wp-config.php
MySQL database password *
[+] /home/bellalea/public_html/epictrafficsystemsbonus-mark/wp-config.php
MySQL database password *
[+] /home/bellalea/public_html/soccercoachingtips/wp-config.php
MySQL database password *
[+] /home/bellalea/public_html/tswpumps.com/wp-config.php
MySQL database password *
[+] /home/bellalea/public_html/youronlinebachelorsdegree.org/wp-config.php
MySQL database password *
[+] /home/skynet1/public_html/97vpn.com/admin/db.inc.php
[+] /home/skynet1/public_html/health.17sky.net/include/dialog/config.php
rmp
[+] /home/skynet1/public_html/health.17sky.net/myadmin/config.php
$GLOBALS[‘cfg_ftp_pwd
[+] /home/bestbarg/public_html/wp-config.php
MySQL database password *

• We have seen that from the result, attacker found the configuration files of WordPress CMS. So is the result will make dangerous the WordPress CMS?? Yes, because wp-config.php has many informations about database of the WordPress CMS. From those informations, the attacker can connect to database,. So attacker can enter admin page (…/wp-admin) of WordPress with use adding username and password equal Super Administrator or change the password of Super Administrator of WordPress CMS in database of the targeted websites of WordPress CMS.

From the hacking tutorial of WordPress CMS above. I hope Management of WordPress can improve their application (WordPress CMS). I have many suggestions to Management of WordPress about this posting :

• If wp-config.php file can be changed with other name easily without error, so this is one of step to avoid the hacking activity for WordPress. With other words, wp-config.php can be altered easily.
• Administrator page (../wp-admin) can be hidden according willingness.

For WordPress User/Costumers, Management of WordPress have to change their system for security and convenience. I believe that Management of WordPress can do them.

This posting only gives information for WordPress users and Management of WordPress. This posting isn’t used for cyber criminal or hacking activity.

Tags: backdoor, php, security, server