Quick Tips About Wordpress Defacing

Wordpress Defacing without uploading Shell

usually after gaining admin acess on wordpress website we upload shell on website, its takes some extra time, even you can deface wordpress's index page without uploading shell !
Goto wordpress dashboard than theme editor and you'll see 2-3 thmes there like twenty ten and twenly eleven.
Look there for active Theme on That website and edit index.php of that theme. and you'll see your deface pages on website's home Page.

Bypassing Permission Denided for index.php in wordpress

sometimes after upload shell on wordpress website when you'll try to replace index.php's socurce code in public_html/ directory with you deface page, it will show error like permission denided, can't write in file etc, and sometimes permission change dones't work, then follow the same method whic is give above, change active theme's index.php file and home will chnage with your deface page.

Simple :)

Keep Visiting www.indicyborg.blogspot.in

Read More

Two factor Authentication on wordpress

What is two factor authentication ?

Two –Factor authentication is commonly found in electronic computer authentication, where basic authentication is the process of a requesting entity presenting some evidence of its identity to a second entity. Two-factor authentication seeks to decrease the probability that the requestor is presenting false evidence of its identity .

Duo Security Overview

Duo Security provides two-factor authentication as a service built to prevent account takeover and online fraud. Protect remote access with drop-in support for most VPNs and Unix, or add login or transaction verification to any website with Duo's powerful web APIs.

Benefits using Duo Security

Compliance: Easily meet federal and industry regulations for strong authentication such as PCI DSS and HIPAA.
Cost-effective: No hardware to deploy and manage, and self- service user enrollment to reduce administrative burden.
Scalable: Duo leverages the cloud to rapidly scale as your user base grows, removing the need for onsite infrastructure.
Compatible: Integrates seamlessly with existing technology investments and end-user smartphone platforms.

The content of this Article “Two-Factor Authentication on wordpress’’ is for public to know more about it and information is provided by various sources.

Read More

Wordpress Exploit : 10,000+ Websites are Vunerable For this attack

This venerability is known as WordPress Easy Comment Upload Venerability.
Google dorks:


"inurl:/wp-content/plugins/easy-comment-uploads/upload-form.php"
/wp-content/plugins/easy-comment-uploads/upload-form.php
Index of /wp-content/plugins/easy-comment-uploads

Open Google and enetr any dork which Given,
Now selct any website
and goto this url site.com/wp-content/plugins/easy-comment-uploads/upload-form.php
You'll Got Upload Option here :)
Now Upload Your Deface ....
and check it here site.com/wp-content/uploads/2011/05/yourfilehere


Note :- In some websites you can Upload your deface in txt on only ... and you can upload shell in 50% sites only ... upload shell in image format ex; shell.asp;.jpg

DEMO:
http://www.findthepearl.com/
http://www.findthepearl.com/wp-content/plugins/easy-comment-uploads/


Happy Hacking :p

Read More