Hi, I’m doing a CTF on a WordPress site but WPscan shows no vulnerable plugins/themes. I have one username and wp-login page, but I’m told that brute-forcing is not required for this box. There aren’t any weird directories found via enumeration, and robots.txt only contains a line on wp-admin/admin-ajax.php.

In my experience with exploiting WordPress, usually finding something vulnerable in WPscan shows me which way to go, but now I’m stumped. Does anyone have any ideas, or is this a red herring?

Hey y’all I’m running a little low on cash right now so I’m trying to turn to the best source of cash I can right now so if anyone wants anything pirated Right now send me a message I’ll get it pirated for you give me like the specifications of what you want pirated and I’ll get it for you depending on what it is the the price will change I’m going to keep it as cheap as I can shoot me a message if you’re interested