{"id":784,"date":"2016-03-06T02:58:49","date_gmt":"2016-03-06T02:58:49","guid":{"rendered":"https:\/\/hhardsoft.wordpress.com\/?p=784"},"modified":"2024-11-09T23:24:30","modified_gmt":"2024-11-09T22:24:30","slug":"manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl","status":"publish","type":"post","link":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/","title":{"rendered":"Manera simple de auditar un WordPress. Wpscan y Admin.pl"},"content":{"rendered":"\n<figure class=\"wp-block-image aligncenter\"><a href=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/02\/wordpress-logo-stacked-rgb.png?ssl=1\" rel=\"attachment wp-att-389\"><img data-recalc-dims=\"1\" fetchpriority=\"high\" decoding=\"async\" width=\"499\" height=\"310\" data-attachment-id=\"389\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/cloudbackup\/wordpress-logo-stacked-rgb\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/02\/wordpress-logo-stacked-rgb.png?fit=499%2C310&amp;ssl=1\" data-orig-size=\"499,310\" data-comments-opened=\"1\" data-image-title=\"wordpress-logo-stacked-rgb\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/02\/wordpress-logo-stacked-rgb.png?fit=499%2C310&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/02\/wordpress-logo-stacked-rgb.png?resize=499%2C310&#038;ssl=1\" alt=\"wordpress-logo-stacked-rgb\" class=\"wp-image-389\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/02\/wordpress-logo-stacked-rgb.png?w=499&amp;ssl=1 499w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/02\/wordpress-logo-stacked-rgb.png?resize=300%2C186&amp;ssl=1 300w\" sizes=\"(max-width: 499px) 100vw, 499px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Hola a todos, hoy traigo conmigo un tutorial simple, &nbsp;como <strong>auditar un CMS<\/strong> como <strong>WordPress<\/strong>. Aqu\u00ed os dejo<strong> el link del v\u00eddeo<\/strong> para el que no quiera leer:&nbsp;<a href=\"https:\/\/youtu.be\/97L5IYUKlo0\" target=\"_blank\" rel=\"noopener\">Auditoria WordPress.<\/a><\/p>\n\n\n\n<!--more-->\n\n\n\n<p class=\"wp-block-paragraph\"><em>Manera simple de auditar un WordPress. Wpscan y Admin.pl:<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A continuaci\u00f3n muestro los pasos llevados a cabo para realizar esta <strong>auditoria para WordPress<\/strong>, el primer paso que realizo, es ejecutar un script basado en perl, que lo que hace es una fuerza bruta a todas las posibles rutas donde se pueda encontrar el posible panel de administraci\u00f3n del sitio, para posteriormente realizar un ataque de fuerza bruta:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><a href=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_11.png?ssl=1\" rel=\"attachment wp-att-785\"><img data-recalc-dims=\"1\" decoding=\"async\" width=\"312\" height=\"30\" data-attachment-id=\"785\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/screenshot_1-9\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_11.png?fit=312%2C30&amp;ssl=1\" data-orig-size=\"312,30\" data-comments-opened=\"1\" data-image-title=\"Screenshot_1\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_11.png?fit=312%2C30&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_11.png?resize=312%2C30&#038;ssl=1\" alt=\"Screenshot_1\" class=\"wp-image-785\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_11.png?w=312&amp;ssl=1 312w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_11.png?resize=300%2C29&amp;ssl=1 300w\" sizes=\"(max-width: 312px) 100vw, 312px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Una vez ejecutado el script, este nos pedir\u00e1 que introduzcamos la url del sitio a examinar:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><a href=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_2.png?ssl=1\" rel=\"attachment wp-att-786\"><img data-recalc-dims=\"1\" decoding=\"async\" width=\"742\" height=\"322\" data-attachment-id=\"786\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/screenshot_2-10\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_2.png?fit=742%2C322&amp;ssl=1\" data-orig-size=\"742,322\" data-comments-opened=\"1\" data-image-title=\"Screenshot_2\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_2.png?fit=742%2C322&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_2.png?resize=742%2C322&#038;ssl=1\" alt=\"Screenshot_2\" class=\"wp-image-786\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_2.png?w=742&amp;ssl=1 742w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_2.png?resize=300%2C130&amp;ssl=1 300w\" sizes=\"(max-width: 742px) 100vw, 742px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Una vez hecho esto nos pedir\u00e1 la extensi\u00f3n del archivo que deseamos examinar en mi caso busco los php:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><a href=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_3.png?ssl=1\" rel=\"attachment wp-att-787\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"438\" data-attachment-id=\"787\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/screenshot_3-9\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_3.png?fit=808%2C442&amp;ssl=1\" data-orig-size=\"808,442\" data-comments-opened=\"1\" data-image-title=\"Screenshot_3\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_3.png?fit=800%2C438&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_3.png?resize=800%2C438&#038;ssl=1\" alt=\"Screenshot_3\" class=\"wp-image-787\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_3.png?w=808&amp;ssl=1 808w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_3.png?resize=300%2C164&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_3.png?resize=768%2C420&amp;ssl=1 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A continuaci\u00f3n&nbsp;comenzar\u00e1 el escaneo, dando como resultado una url positiva:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><a href=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_4.png?ssl=1\" rel=\"attachment wp-att-788\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"501\" data-attachment-id=\"788\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/screenshot_4-8\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_4.png?fit=1150%2C720&amp;ssl=1\" data-orig-size=\"1150,720\" data-comments-opened=\"1\" data-image-title=\"Screenshot_4\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_4.png?fit=800%2C501&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_4.png?resize=800%2C501&#038;ssl=1\" alt=\"Screenshot_4\" class=\"wp-image-788\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_4.png?w=1150&amp;ssl=1 1150w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_4.png?resize=300%2C188&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_4.png?resize=768%2C481&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_4.png?resize=1024%2C641&amp;ssl=1 1024w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Como podemos ver, esta informaci\u00f3n la podemos utilizar para realizar un ataque de fuerza bruta a este formulario de acceso.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">El siguiente paso es <strong>auditar el CMS<\/strong> con la <strong>herramienta wpscan<\/strong>, lo primero que haremos ser\u00e1 enumerar los posibles plugins desactualizados y ver si existe alguna vulnerabilidad:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><a href=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_5.png?ssl=1\" rel=\"attachment wp-att-789\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"608\" height=\"30\" data-attachment-id=\"789\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/screenshot_5-8\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_5.png?fit=608%2C30&amp;ssl=1\" data-orig-size=\"608,30\" data-comments-opened=\"1\" data-image-title=\"Screenshot_5\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_5.png?fit=608%2C30&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_5.png?resize=608%2C30&#038;ssl=1\" alt=\"Screenshot_5\" class=\"wp-image-789\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_5.png?w=608&amp;ssl=1 608w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_5.png?resize=300%2C15&amp;ssl=1 300w\" sizes=\"(max-width: 608px) 100vw, 608px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><a href=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_6.png?ssl=1\" rel=\"attachment wp-att-790\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"501\" data-attachment-id=\"790\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/screenshot_6-9\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_6.png?fit=1154%2C722&amp;ssl=1\" data-orig-size=\"1154,722\" data-comments-opened=\"1\" data-image-title=\"Screenshot_6\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_6.png?fit=800%2C501&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_6.png?resize=800%2C501&#038;ssl=1\" alt=\"Screenshot_6\" class=\"wp-image-790\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_6.png?w=1154&amp;ssl=1 1154w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_6.png?resize=300%2C188&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_6.png?resize=768%2C480&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_6.png?resize=1024%2C641&amp;ssl=1 1024w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Como podemos ver en esta imagen, se ve claramente que podemos identificar el tema que esta utilizando este sitio web y la versi\u00f3n que utiliza de WordPress a parte de toda la informaci\u00f3n que podemos interpretar.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Como vemos en la siguiente imagen podemos apreciar 1 de los tantos plugins que hay instalados en esta web, no dice que esta desactualizado y que existe una <strong>posible vulnerabilidad<\/strong>:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><a href=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_9.png?ssl=1\" rel=\"attachment wp-att-791\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"65\" data-attachment-id=\"791\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/screenshot_9-8\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_9.png?fit=1157%2C94&amp;ssl=1\" data-orig-size=\"1157,94\" data-comments-opened=\"1\" data-image-title=\"Screenshot_9\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_9.png?fit=800%2C65&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_9.png?resize=800%2C65&#038;ssl=1\" alt=\"Screenshot_9\" class=\"wp-image-791\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_9.png?w=1157&amp;ssl=1 1157w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_9.png?resize=300%2C24&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_9.png?resize=768%2C62&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_9.png?resize=1024%2C83&amp;ssl=1 1024w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Tras enumerar los plugins instalados, procederemos a enumerar los usuarios dados de alta en este CMS:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><a href=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_7.png?ssl=1\" rel=\"attachment wp-att-792\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"583\" height=\"27\" data-attachment-id=\"792\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/screenshot_7-7\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_7.png?fit=583%2C27&amp;ssl=1\" data-orig-size=\"583,27\" data-comments-opened=\"1\" data-image-title=\"Screenshot_7\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_7.png?fit=583%2C27&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_7.png?resize=583%2C27&#038;ssl=1\" alt=\"Screenshot_7\" class=\"wp-image-792\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_7.png?w=583&amp;ssl=1 583w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_7.png?resize=300%2C14&amp;ssl=1 300w\" sizes=\"(max-width: 583px) 100vw, 583px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Como podemos apreciar en esta imagen existen 9 usuarios dados de alta en este WordPress, con toda la recogida de informaci\u00f3n conseguida, podemos llegar a elegir diferentes vectores de ataque respecto a este sitio web, desde un ataque de fuerza bruta, hasta la explotaci\u00f3n de las posibles vulnerabilidades de los plugins.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><a href=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_8.png?ssl=1\" rel=\"attachment wp-att-793\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"501\" height=\"368\" data-attachment-id=\"793\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/screenshot_8-8\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_8.png?fit=501%2C368&amp;ssl=1\" data-orig-size=\"501,368\" data-comments-opened=\"1\" data-image-title=\"Screenshot_8\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_8.png?fit=501%2C368&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_8.png?resize=501%2C368&#038;ssl=1\" alt=\"Screenshot_8\" class=\"wp-image-793\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_8.png?w=501&amp;ssl=1 501w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/screenshot_8.png?resize=300%2C220&amp;ssl=1 300w\" sizes=\"(max-width: 501px) 100vw, 501px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Conclusi\u00f3n: Con dos simples herramientas, hemos conseguido varios vectores de ataque respecto a este sitio web, sin embargo este es un proceso muy tedioso lo cual lleva muchas horas de recogida, a m\u00e1s informaci\u00f3n recogida m\u00e1s posibles vectores de ataque, por eso es tan importante la fase de footprint a la hora de intentar penetrar en cualquier sitio.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Gracias por leer el blog. Saludos, @DavidDeMaya.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hola a todos, hoy traigo conmigo un tutorial simple, &nbsp;como auditar un CMS como WordPress. Aqu\u00ed os dejo el link del v\u00eddeo para el que no quiera leer:&nbsp;Auditoria WordPress.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[3,5,7],"tags":[8,28,59],"class_list":["post-784","post","type-post","status-publish","format-standard","hentry","category-guias","category-informacion","category-seguridad-informatica","tag-auditoria","tag-hacking","tag-wordpress"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Manera simple de auditar un WordPress. Wpscan y Admin.pl - Hardsoft Security<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Manera simple de auditar un WordPress. Wpscan y Admin.pl - Hardsoft Security\" \/>\n<meta property=\"og:description\" content=\"Hola a todos, hoy traigo conmigo un tutorial simple, &nbsp;como auditar un CMS como WordPress. Aqu\u00ed os dejo el link del v\u00eddeo para el que no quiera leer:&nbsp;Auditoria WordPress.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/\" \/>\n<meta property=\"og:site_name\" content=\"Hardsoft Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/HardSoftDavid\" \/>\n<meta property=\"article:published_time\" content=\"2016-03-06T02:58:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-11-09T22:24:30+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/02\/wordpress-logo-stacked-rgb.png\" \/>\n<meta name=\"author\" content=\"david\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:site\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"david\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2016\\\/03\\\/06\\\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2016\\\/03\\\/06\\\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\\\/\"},\"author\":{\"name\":\"david\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"headline\":\"Manera simple de auditar un WordPress. Wpscan y Admin.pl\",\"datePublished\":\"2016-03-06T02:58:49+00:00\",\"dateModified\":\"2024-11-09T22:24:30+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2016\\\/03\\\/06\\\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\\\/\"},\"wordCount\":416,\"commentCount\":1,\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2016\\\/03\\\/06\\\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\\\/#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2015\\\/02\\\/wordpress-logo-stacked-rgb.png\",\"keywords\":[\"auditoria\",\"hacking\",\"wordpress\"],\"articleSection\":[\"Gu\u00edas\",\"Informaci\u00f3n\",\"Seguridad inform\u00e1tica\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2016\\\/03\\\/06\\\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2016\\\/03\\\/06\\\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\\\/\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2016\\\/03\\\/06\\\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\\\/\",\"name\":\"Manera simple de auditar un WordPress. Wpscan y Admin.pl - Hardsoft Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2016\\\/03\\\/06\\\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2016\\\/03\\\/06\\\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\\\/#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2015\\\/02\\\/wordpress-logo-stacked-rgb.png\",\"datePublished\":\"2016-03-06T02:58:49+00:00\",\"dateModified\":\"2024-11-09T22:24:30+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2016\\\/03\\\/06\\\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2016\\\/03\\\/06\\\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2016\\\/03\\\/06\\\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\\\/#primaryimage\",\"url\":\"http:\\\/\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2015\\\/02\\\/wordpress-logo-stacked-rgb.png\",\"contentUrl\":\"http:\\\/\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2015\\\/02\\\/wordpress-logo-stacked-rgb.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2016\\\/03\\\/06\\\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Manera simple de auditar un WordPress. Wpscan y Admin.pl\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\",\"name\":\"Hardsoft Security\",\"description\":\"Chasing (In)Security\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/hardsoftsecurity.es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\",\"name\":\"david\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"caption\":\"david\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Manera simple de auditar un WordPress. Wpscan y Admin.pl - Hardsoft Security","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/","og_locale":"es_ES","og_type":"article","og_title":"Manera simple de auditar un WordPress. Wpscan y Admin.pl - Hardsoft Security","og_description":"Hola a todos, hoy traigo conmigo un tutorial simple, &nbsp;como auditar un CMS como WordPress. Aqu\u00ed os dejo el link del v\u00eddeo para el que no quiera leer:&nbsp;Auditoria WordPress.","og_url":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/","og_site_name":"Hardsoft Security","article_publisher":"https:\/\/www.facebook.com\/HardSoftDavid","article_published_time":"2016-03-06T02:58:49+00:00","article_modified_time":"2024-11-09T22:24:30+00:00","og_image":[{"url":"http:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/02\/wordpress-logo-stacked-rgb.png","type":"","width":"","height":""}],"author":"david","twitter_card":"summary_large_image","twitter_creator":"@DavidDeMaya","twitter_site":"@DavidDeMaya","twitter_misc":{"Escrito por":"david","Tiempo de lectura":"4 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/#article","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/"},"author":{"name":"david","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"headline":"Manera simple de auditar un WordPress. Wpscan y Admin.pl","datePublished":"2016-03-06T02:58:49+00:00","dateModified":"2024-11-09T22:24:30+00:00","mainEntityOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/"},"wordCount":416,"commentCount":1,"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/#primaryimage"},"thumbnailUrl":"http:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/02\/wordpress-logo-stacked-rgb.png","keywords":["auditoria","hacking","wordpress"],"articleSection":["Gu\u00edas","Informaci\u00f3n","Seguridad inform\u00e1tica"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/","url":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/","name":"Manera simple de auditar un WordPress. Wpscan y Admin.pl - Hardsoft Security","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/#primaryimage"},"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/#primaryimage"},"thumbnailUrl":"http:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/02\/wordpress-logo-stacked-rgb.png","datePublished":"2016-03-06T02:58:49+00:00","dateModified":"2024-11-09T22:24:30+00:00","author":{"@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"breadcrumb":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/#primaryimage","url":"http:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/02\/wordpress-logo-stacked-rgb.png","contentUrl":"http:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/02\/wordpress-logo-stacked-rgb.png"},{"@type":"BreadcrumbList","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/03\/06\/manera-simple-de-auditar-un-wordpress-wpscan-y-admin-pl\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/hardsoftsecurity.es\/"},{"@type":"ListItem","position":2,"name":"Manera simple de auditar un WordPress. Wpscan y Admin.pl"}]},{"@type":"WebSite","@id":"https:\/\/hardsoftsecurity.es\/#website","url":"https:\/\/hardsoftsecurity.es\/","name":"Hardsoft Security","description":"Chasing (In)Security","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hardsoftsecurity.es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Person","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a","name":"david","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","caption":"david"}}]}},"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p7xGFx-cE","jetpack-related-posts":[{"id":2696,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2022\/03\/18\/exploiting-buffer-overflow\/","url_meta":{"origin":784,"position":0},"title":"Exploiting Buffer Overflow Windows","author":"david","date":"marzo 18, 2022","format":false,"excerpt":"Bienvenid@s a tod@s, hoy os traigo un nuevo post al blog. Hoy tratamos un caso pr\u00e1ctico de c\u00f3mo explotar una vulnerabilidad de desbordamiento de b\u00fafer de una aplicaci\u00f3n, en este caso instalada en un Windows 7 de 32 Bits. Software necesario. PCMan FTP Server 2.0.7. Conseguir aqu\u00ed\u00a0exploit-db Immunity Debugger\u00a0aqu\u00ed. mona.py\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/03\/Imagen-1-1.png?fit=802%2C429&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/03\/Imagen-1-1.png?fit=802%2C429&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/03\/Imagen-1-1.png?fit=802%2C429&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/03\/Imagen-1-1.png?fit=802%2C429&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":680,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/10\/26\/introduccion-al-footprinting-con-kali-linux-2-0\/","url_meta":{"origin":784,"position":1},"title":"Introducci\u00f3n al Footprinting Con Kali Linux 2.0","author":"david","date":"octubre 26, 2015","format":false,"excerpt":"Buenas a todos, hoy comenzaremos con una introducci\u00f3n al Footprinting, \u00bfEn que consiste esto?, b\u00e1sicamente consiste en la recogida de informaci\u00f3n de la victima\/objetivo, para conseguir vectores de ataque, esto quiere decir que a m\u00e1s informaci\u00f3n recogida m\u00e1s vectores de ataque a explotar, esta fase pertenece al sistema que se\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"Screenshot_1","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/10\/screenshot_1.png?resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/10\/screenshot_1.png?resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/10\/screenshot_1.png?resize=525%2C300 1.5x"},"classes":[]},{"id":2810,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2022\/10\/23\/trabajo-de-fin-de-master-ciberseguridad\/","url_meta":{"origin":784,"position":2},"title":"Trabajo de Fin de M\u00e1ster &#8211; Ciberseguridad","author":"david","date":"octubre 23, 2022","format":false,"excerpt":"Buenas a tod@s, hoy os traigo un post muy interesante, donde voy a mostrar el Trabajo de Fin de M\u00e1ster que he presentado. El trabajo est\u00e1 relacionado con los siguientes \u00e1mbitos Direcci\u00f3n de Ciberseguridad, Hacking \u00c9tico y Seguridad Ofensiva. Introducci\u00f3n Durante los \u00faltimos a\u00f1os, he enfocado mi carrera profesional a\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/10\/anarchy-computer-hack-hacker-wallpaper-preview.jpg?fit=728%2C363&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/10\/anarchy-computer-hack-hacker-wallpaper-preview.jpg?fit=728%2C363&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/10\/anarchy-computer-hack-hacker-wallpaper-preview.jpg?fit=728%2C363&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/10\/anarchy-computer-hack-hacker-wallpaper-preview.jpg?fit=728%2C363&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":3293,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/09\/07\/empezar-en-ciberseguridad\/","url_meta":{"origin":784,"position":3},"title":"Empezar en Ciberseguridad: Gu\u00eda para Novatos","author":"david","date":"septiembre 7, 2023","format":false,"excerpt":"La ciberseguridad es un campo en constante evoluci\u00f3n y con una demanda creciente. Si acabas de terminar tus estudios universitarios\/educaci\u00f3n y te preguntas c\u00f3mo comenzar en ciberseguridad, este post (y v\u00eddeo) es para ti. \u00bfQu\u00e9 habilidades t\u00e9cnicas necesito para comenzar en ciberseguridad? M\u00e1s all\u00e1 de lo que hayas aprendido en\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":3654,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/","url_meta":{"origin":784,"position":4},"title":"Hacking WordPress &#8211; Gu\u00eda de explotaci\u00f3n b\u00e1sica","author":"david","date":"abril 2, 2024","format":false,"excerpt":"\u00a1Hola a todos! Hoy vamos a meternos en el mundo de WordPress con este nuevo post \"Hacking WordPress - Gu\u00eda de explotaci\u00f3n b\u00e1sica\", pero desde una perspectiva un poco diferente. No, no vamos a hablar sobre c\u00f3mo crear el blog de tus sue\u00f1os o la p\u00e1gina de tu negocio online.\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=1200%2C648&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=1200%2C648&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=1200%2C648&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=1200%2C648&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=1200%2C648&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":2921,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/04\/10\/elk-stack-en-ciberseguridad\/","url_meta":{"origin":784,"position":5},"title":"ELK Stack en Ciberseguridad: Fortalece tu Seguridad Inform\u00e1tica","author":"david","date":"abril 10, 2023","format":false,"excerpt":"Descubre c\u00f3mo utilizar ELK Stack en seguridad inform\u00e1tica con nuestro \u00faltimo post en el blog. Aprende c\u00f3mo la combinaci\u00f3n de Elasticsearch, Logstash y Kibana puede ayudarte a monitorear, analizar y responder en tiempo real a las amenazas de seguridad. 1. Introducci\u00f3n a ELK Stack: Qu\u00e9 es y para qu\u00e9 sirve.\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2021\/11\/elkStack.png?fit=600%2C200&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2021\/11\/elkStack.png?fit=600%2C200&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2021\/11\/elkStack.png?fit=600%2C200&ssl=1&resize=525%2C300 1.5x"},"classes":[]}],"jetpack_likes_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/784","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/comments?post=784"}],"version-history":[{"count":1,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/784\/revisions"}],"predecessor-version":[{"id":3721,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/784\/revisions\/3721"}],"wp:attachment":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/media?parent=784"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/categories?post=784"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/tags?post=784"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}