[Gregory]

makes it look way too easy to crack WP passwords

https://blog.wpsec.com/cracking-wordpress-passwords/

[Edward]

omg

Now that we have the hashes, we can use a password-cracking tool called John the Ripper (john) to crack it. It comes pre-installed on Kali Linux and is available in most other Linux distros via their package managers (e.g. apt install john). Unfortunately, the john package shipped with apt in Ubuntu and Debian are incomplete (they are not the jumbo version which includes support for everything), so you might have better luck running it with Docker on non-Kali distros.

[Ruth]

oh great….. here come the Kali Linux stans

[Helen]

Doesn’t WordPress still use basic MD5 hashing for user passwords in Mysql? might be part of the problem?

[Madison]

you might have better luck running it with Docker on non-Kali distros.

Imagine being a hackzor and running Docker to crack passwords lmaooo

[Larry]

GoDaddy had malware on their servers for years and didn’t know it

[Philip]

What’s up with “Thai Visa Centre” and their hacker boss Chad

[Angela]

I thought WP Core was moving to bcrypt for passwords

[Author]

Posts