-----------------------------------------------------------------------------------------
| Exploit Title : Stanford University ( Longevity ) | Wordpress Website BruteForce Attack
| Google Dork : site:stanford.edu inurl:/wp-content/
| Date : 08/09/2017
| Exploit Author : Mohammad Babaee
| Vendor Homepage : stanford.edu
| Software Link : stanford.edu
| Version : 1.0
| Tested on : Windows10 , Firefox
|
|+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
| Proof of concept : Stanford University [ Brute Force Attack ]
|
| 1 - Search this Google Dork : site:stanford.edu inurl:/wp-content/
| 2 - Find The ( Longevity Subdomain ) of Stanford University
| 3 - True Site : ( http://longevity.stanford.edu )
| 4 - Now , We Have a website with low security ! :)
| 5 - This Site is using ( wordpress CMS ) Ver : 4.8.1 | Without Security measures !
| 6 - Defult Pages are avalable , you can see : readme.html , install.php , wp-login , wp-admin !
| 7 - Note : Username is ( admin ) & Adminpage is : ( http://longevity.stanford.edu/wp-login.php )
| 6 - The End , BruteForce This Site & Enjoy Of Hacking ...!
|
|
| DEMO :
|
| http://longevity.stanford.edu/wp-login.php | username : admin | password : BruteForce to find ! | [BruteForce Attack VULNERABILITY]
|
|
|
|
| +++ Discovered by : Mohammad Babaee | Don't forget me ...! | I will come back soon :)
|
|
-----------------------------------------------------------------------------------------
