how to hack wordpress?
WordPress Security Flaw: Reset Admin Password of Any Blog Without Confirmation! | HackGallerytips.blogspot.com |
The hack is still open and can even be applied to the latest WordPress release 2.8.3
This is how it works:
The normal password reset page asks you to enter the username or email address and if that’s correct then a link is send to the email address associated with that account to reset your password but note that the password itself is not changed and you can just ignore the email and carry on.
But hackers have found a way in which they simply bypass that check and the password is reset by passing a special value in the key parameter of the reset page URL.
This is all you have todo:
http://www.domainname.com/wp-login.php?action=rp&key[]=
Replace domainname with any domain name of a blog hosted on WordPress and see it for yourself!Here is a list of blogs that I have tried this hack on. Sorry guys. You can always restore your passwords though.
1) Select one wordpress site
![]() |
| HackGallerytips.blogspot.com |
2) TechToggle – I really like this blog though
![]() |
| HackGallerytips.blogspot.com |
3) TutPlus – Yeah yeah yeah!
![]() |
| HackGallerytips.blogspot.com |
4) Tutorial9
![]() |
| HackGallerytips.blogspot.com |
5) WordPress Founder’s Personal Blog! ma.tt [Am not sure whether its reset or not but I think it is]
6) Noupe
![]() |
| HackGallerytips.blogspot.com |
7) PKPolitics
![]() |
| HackGallerytips.blogspot.com |
There are a couple others I tried this on and none of them was protected!
Note: I have just tried this as a proof-of-concept and nothing more then that. You will get an email with your new password and can always reset it yourself again. And sorry guys, OpenSource is not the best thing on earth!
Update:
Read the detailed fix of this wordpress admin password reset exploitUpdate 2:
WordPress update 2.8.4 has been released.Become master of all the latest technology with mcp dumps. Download wordpress 3.2.1 scjp dumps to prepare and pass real exam in first try guaranteed.
Download WordPress 2.8.3 (Stable)
Even though upgrading to WordPress 2.8.3 is a one-click process, if somehow unfortunately you can’t then proceed to WordPress’s classic 5 minute installation guide.







Try this Reliance 3G trick at low balance only.
Here is settings for Different APN working with Reliance.1. rcomnet – Just write APN as rcomnet and leave everything as default. No proxy and port needed.
2. rcommms / rcomwap – APN – rcommms (No disconnection) or rcomwap
(disconnects after every 9 MB)
Proxy no – 10.239.221.22 or 10.239.221.5
Port no- 8080
When your 2.5 GB is over then u can resubscribe the plan -
First u need to unsubscribe by sending sms Unsub 8024 to 155223 or Unsub 8022 to 155223. If u get no Default
configured then call 155223 and then select language by pressing 1 for eng and 2 for hindi.
Then type code as 2084 and press 1 to confirm. After that u will also get msg as you have successfully unsubscribed.
Now subscribe again by dialling *123*099#
Recently, Reliance 3G is launched in Jamshedpur and this trick is working there, reported by one of our blog reader.