Hello Hackers!
How are you? Today, I am going to share a tip on finding vulnerabilities in WordPress websites. This can be useful for pentesting WordPress websites, especially when you identify that a website is using WordPress in the backend (you can use tools like Wappalyzer for this).
Here are the steps:
- Open any image of the website in a new tab.
- Remove all content from the URL and enter either of these:
wp-json/wp/v2/usershttps://example.com/wp-json/wp/v2/users- This may reveal various user details such as ID, name, avatars, etc.
- Additionally, you can try:
/wp/wp-admin/install.php/wp/wp-admin/upgrade.php/wp-admin/install.php- Checking these URLs might provide information about the status of the database and WordPress.
If the results resemble what is shown in the image, you can report it as information disclosure. This is valuable for understanding user details, gaining insights into the WordPress version, and the backend situation. Report the bug, and you might receive an awesome bounty.
In my early days, I wrote a detailed article about my experience with this technique. You can read it HERE.
Note: Some websites may accept this bug, while others might reject it, claiming it is not a bug. Be aware before reporting. I share this experience for beginners in the field who are eager to learn something new and are on the lookout for their first bug and bounty.
Thank You,
MR.X FACTOR
🔗 Handles:
- Linktree: https://linktr.ee/mrxfact0r_99