Bypass Wordpress 403 in Bank Website

Bypass Wordpress 403 in Bank Website

simple technique to bypass WordPress WPadmin

Few day ago i was was sitting in my room and I decided to open a bank application and there was lot of things was going on I decided to check it out what is going on there and how can I login or Bypass

try to visit to login www.bankabc.com/wp-admin to simply told me that you are not allow to go on this URL so this figure out so I need to do something

so I open my Khali Linux machine and simply search their WPS can because our film with it is using wordpress so I decided to run a scan with WPSCAN .

so I just simply put this some simple command for a scan

wpscan — url site.com — api-token xxxxxxxxxxxxxxxxxxxx — random-user-agent — force — wp-content-dir wp-admin

Output

[i] It seems like you have not updated the database for some time.
[?] Do you want to update now? [Y]es [N]o, default: [N]Y
[i] Updating the Database ...
[i] Update completed.

Scan Aborted: The URL supplied redirects to https://www.xxx.com/. Use the --ignore-main-redirect option to ignore the redirection and scan the target, or change the --url option value to the redirected URL.

dictionary I try to redirects with the URL so it don’t show me more errors safe any time you received viral you have to change your agent or you have to give the right path — ignore-main-redirect

so I try to visit the URL it was saying you are not allowed to anything on this so I was similar with one another place that was also skipped by fire walls

https://www.x.x.x.x.com/wp-login.php was working but another 403.

I simply go and and Add some payloads simole payload wp-login.php/<>

this was one of the simple technique to bypass wordpress WP-login and different areas the condition can be different. if your still facing your firewalls you need to add continuously more payloads.

Hope how you article will find you help and if you have a questions you can let me know and thanks to you Shout Out to WPS can