How To Gain Admin acess on wordpress websites after uploading shell



if you want acess in same site where you uploaded shell then simply edit wp-config.php

wp1.jpg (407×250)

Copy MySQL Database's username and password from wp-config.php
Now Goto MYSQL option in b374k shell 
and paste username and password there

wp2.jpg (456×233)

Now Click on Go
Now you wil get 2 tables There
click on table below information_schema

wp3.jpg (352×124)

click on 2 table and find wp_users columns there
and click on wp_users

wp5.jpg (555×186)

you'll get admin username password and email there,
but its Hard to crack wp password so we need to reset it with own hash !
simply put there password reset Query in Black Box
UPDATE wp_users SET user_pass =md5( '123456') WHERE user_login = 'admin';
and Click On Go
you'll get a Reply 
UPDATE wp_users SET user_pass =md5( '123456') WHERE user_login = 'admin'; [ok]
its means Password chnaged sucessfully !

wp6.jpg (474×175)

Now goto : http://www.site.com/wp-admin and login there =)

wp1.jpg (369×358)