I was doing a WordPress installation the other day when I noticed how insecure the default generated password was.

On line 38 in wp-admin/includes/upgrade.php (wordpress version 2.3.1) I found that a 6 character password is generated this way:

$random_password = substr(md5(uniqid(microtime())), 0, 6);

The md5 function returns a 32 character hexadecimal number and substr chops off first six characters. Doing elementary combinatorics we can find that the number of possible passwords is 166 (16 to the power 6) or 16,777,216, or roughly just 16.7 million passwords!

I am more than sure that most people doing WP installations never change the default password. If you're on a good connection and can do just 100 password checks per second, then you can crack a WordPress installation in worst case time of 16,777,216/100 seconds, which is 46.6 hours! Most likely you'd crack the password in half of that time, so you can crack any WordPress installation that has a default password in about 24 hours!

Comments

August 03, 2014, 18:09

I was very pleased to find this site.I wanted to thank you for this great read!! I definitely enjoying every little bit of it and I have you bookmarked to check out new stuff you post.

independence day images|
independence day quotes|
independence day wallpapers|
independence day sms|
independence day wishes|
independence day poems|
independence day message|
independence day |

August 12, 2014, 14:12

I really love your blog.I wanted to thank you for this great read!! I definitely enjoying each and every little bit of the article and I have you bookmarked your site to check out new stuff you post.

independence day images
happy independence day images.

FIBA Permalink
August 22, 2014, 13:01

I really love your blog.I wanted to thank you for this great read!! I definitely enjoying each and every little bit of the article and I have you bookmarked your site to check out new stuff you post.

fiba 2014
fiba world cup
fiba world cup 2014
Basketball world cup 2014
fiba world cup schedule
fiba world cup 2014 teams
fiba world cup 2014 groups
fiba live streaming,

October 11, 2014, 07:47

The tips which you have shared in this post are just awesome. These tips are really helpful to me and I think it should must helpful to others. I really like the style of writing this article. Your articles are always helps me a lot. Thanks for sharing this wonderful article with us.

Diwali 2014
Diwali Wishes
Diwali images
Diwali SMS
Diwali Rangoli
Diwali messages
Diwali Greetings
Diwali poems
Diwali Quotes
Happy Diwali
Happy Diwali 2014
Happy Diwali Wishes.
Diwali 2014
Diwali Wishes
Diwali images
Happy Diwali SMS
Happy Diwali Rangoli
Happy Diwali messages
Happy Diwali Greetings
Happy Diwali poems
Happy Diwali Quotes
Only Whatsapp.

August 08, 2014, 13:15

Watch Bollywood hotest poonam pandey latest images. click here for all collection.

watch the exciting Hollywood Movies like inception which entertain you completly.

sanchit Permalink
August 13, 2014, 12:00

I am very happy to visit this site and hope to visit here again and again. I have bookmarked your site due to the interesting and relevant stuff found here. Also I have recommended the same to my other friends.
Independence day india
Happy Independence day India
Desh Bhakti songs
Patriotic songs
Whatsapp Status
Fb status
Independence Day Speech in English

Independence Day Quotes

Modi Speech on Independece Day 2014
PM Modi LIVE Speech on Independece Day 2014

This is my site, you can visit it and leave your valuable feedback.

dsfa Permalink
August 19, 2014, 09:31

amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
amazon gift card generator 2014 free download no survey
Points2shop points adder and generator free download 2014
Points2shop points adder and generator free download 2014
Points2shop points adder and generator free download 2014
Points2shop points adder and generator free download 2014
Points2shop points adder and generator free download 2014
Points2shop points adder and generator free download 2014
Points2shop points adder and generator free download 2014
Points2shop points adder and generator free download 2014
Points2shop points adder and generator free download 2014
Points2shop points adder and generator free download 2014
Points2shop points adder and generator free download 2014
Points2shop points adder and generator free download 2014
Points2shop points adder and generator free download 2014
Points2shop points adder and generator free download 2014
Points2shop points adder and generator free download 2014
Points2shop points adder and generator free download 2014
Points2shop points adder and generator free download 2014
adds

August 21, 2014, 13:45
Rosy Permalink
August 30, 2014, 10:56

This article is quite helpful and informative too. I enjoyed a lot. Thanks for sharing such a great article.

Amazon Promotional Code 2014
Amazon Promotional Code
Amazon Promotional Code for August 2014

Thanks for sharing such a great article

September 11, 2014, 10:31

Actually i just love this article. This article has been very nice and informative. I daily see your site to read articles. it is really superb. I have learned a lot from this and i going to bookmark this article for further use.
asus zenfone 5 review
Thank you for writing such a wonderful article. Especially thank you to the authors. I hope that you will continue to post articles like this interesting article

hana Permalink
September 25, 2014, 08:45

Until now I did not notice these things. I'm glad you've mentioned. I understand what you mean. I must thank you for this article
کرکره برقی - Otomatik Kapılar - پنجره دو جداره - قیمت خودرو - خرید ملک در ترکیه - تور پکن
.

October 27, 2014, 08:58

Thanks for the post. Halloween 2014 Images

Keep up the good work.

Leave a new comment

(why do I need your e-mail?)

(Your twitter name, if you have one. (I'm @pkrumins, btw.))

Type the first letter of your name: (just to make sure you're a human)

Please preview the comment before submitting to make sure it's OK.

Advertisements