{"id":941,"date":"2024-01-17T09:21:21","date_gmt":"2024-01-17T09:21:21","guid":{"rendered":"http:\/\/bl1001.kurguresepsiyon.com\/23042008\/?p=941"},"modified":"2024-04-16T07:34:49","modified_gmt":"2024-04-16T07:34:49","slug":"wordpress-brute-force-acigi-kapama","status":"publish","type":"post","link":"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wordpress-brute-force-acigi-kapama\/","title":{"rendered":"WordPress Brute Force A\u00e7\u0131\u011f\u0131 Kapama"},"content":{"rendered":"\n<p>Web sitelerimize bula\u015fan vir\u00fcs sorununu son olarak &#8220;www.camlikhastanesi.com.tr&#8221; web sitemizde ya\u015fad\u0131k. Hastanelerin web siteleri Sa\u011fl\u0131k Bakanl\u0131\u011f\u0131 Siber G\u00fcvenlik departman\u0131 taraf\u0131ndan s\u0131k\u0131 bir \u015fekilde takip edilmekte oldu\u011funu \u00f6\u011frendik. <\/p>\n\n\n\n<p>USOM (Ulusal Siber Olaylara M\u00fcdahele Merkezi) ile yapm\u0131\u015f oldu\u011fumuz g\u00f6r\u00fc\u015fme sonucunda WordPress web sitelerinde yer alan bir a\u00e7\u0131ktan dolay\u0131 &#8220;Brute Force&#8221; denilen sald\u0131r\u0131 y\u00f6ntemini kulland\u0131klar\u0131n\u0131 \u00f6\u011frendik.<\/p>\n\n\n\n<p>Bu sald\u0131r\u0131 y\u00f6ntemine \u00e7\u00f6z\u00fcm olarak halihaz\u0131rda &#8220;Limited Login&#8221; pluginini kullanmaktay\u0131z. Buna ek olarak a\u015fa\u011f\u0131da uygulayaca\u011f\u0131m\u0131z ad\u0131mla birlikte sitelerimizde  bulunan a\u00e7\u0131\u011f\u0131 kapataca\u011f\u0131z.<\/p>\n\n\n\n<p>www.websitesiadresi.com\/wp-json\/wp\/v2\/users\/ URL&#8217;i \u00fczerinden giri\u015f yap\u0131ld\u0131\u011f\u0131nda buradaki kodlardan admin panelimizin kullan\u0131c\u0131 ad\u0131 \u00f6\u011frenilebilmektedir.<\/p>\n\n\n\n<p>Kullan\u0131c\u0131 ad\u0131n\u0131n tespit edilmesiyle birlikte Brute Force sald\u0131r\u0131lar\u0131n\u0131 d\u00fczenlemektedirler. Bu a\u00e7\u0131\u011f\u0131 a\u015fa\u011f\u0131daki y\u00f6ntemle kapat\u0131yoruz.<\/p>\n\n\n\n<p><strong>Not: Bu i\u015flemi WordPress kurulumu tamamlan\u0131r tamamlanmaz yapmam\u0131z gerekmektedir, ve bu i\u015flemin ard\u0131ndan admin paneli kullan\u0131c\u0131 ad\u0131n\u0131 g\u00fcncellememiz gerekmektedir.<\/strong><br>(Biz bu i\u015flemi yapana kadar kullan\u0131c\u0131 ad\u0131m\u0131z tespit edilmi\u015f olabilir.)<\/p>\n\n\n\n<p>Bkz;<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"535\" src=\"http:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-2-1024x535.png\" alt=\"\" class=\"wp-image-944\" srcset=\"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-2-1024x535.png 1024w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-2-300x157.png 300w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-2-768x401.png 768w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-2-1536x803.png 1536w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-2.png 1912w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>\u0130lk olarak kurmu\u015f oldu\u011fumuz sitenin dosyalar\u0131na giri\u015f sa\u011fl\u0131yoruz. <\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"507\" src=\"http:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-1024x507.png\" alt=\"\" class=\"wp-image-942\" srcset=\"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-1024x507.png 1024w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-300x149.png 300w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-768x381.png 768w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-1536x761.png 1536w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image.png 1909w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>Site dosyalar\u0131na giri\u015f yapt\u0131ktan sonra &#8220;.htaccess&#8221; dosyas\u0131na giri\u015f yap\u0131yoruz.<br>A\u015fa\u011f\u0131da bulunan kodu &#8220;.htaccess&#8221; dosyas\u0131nda en \u00fcste ekliyoruz. <\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># Block access to the \/wp-json\/wp\/v2\/users endpoint\r\n&lt;IfModule mod_rewrite.c>\r\n  RewriteEngine On\r\n  RewriteCond %{REQUEST_URI} ^.*wp-json\/wp\/v2\/users.*$\r\n  RewriteRule ^(.*)$ - &#91;F]\r\n&lt;\/IfModule>\r\n\r\n# Block WordPress xmlrpc.php requests\r\n&lt;Files xmlrpc.php>\r\norder deny,allow\r\ndeny from all\r\nallow from xxx.xxx.xxx.xxx\r\n&lt;\/Files><\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"507\" src=\"http:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-1-1024x507.png\" alt=\"\" class=\"wp-image-943\" srcset=\"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-1-1024x507.png 1024w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-1-300x148.png 300w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-1-768x380.png 768w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-1-1536x760.png 1536w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-1.png 1902w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>Bu i\u015flemin ard\u0131ndan siteyi kontrol ediyoruz. <\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"530\" src=\"http:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-3-1024x530.png\" alt=\"\" class=\"wp-image-946\" srcset=\"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-3-1024x530.png 1024w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-3-300x155.png 300w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-3-768x398.png 768w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-3-1536x795.png 1536w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-3.png 1902w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>G\u00f6rm\u00fc\u015f oldu\u011funuz gibi art\u0131k bu URL&#8217;e eri\u015fim sa\u011flanamamaktad\u0131r. Kodumuz ba\u015far\u0131yla \u00e7al\u0131\u015fmaktad\u0131r \ud83d\ude42<\/p>\n\n\n\n<p>\u015eimdi admin panelimizin kullan\u0131c\u0131 ad\u0131n\u0131 g\u00fcncellememiz gerekmektedir.<br>Bu i\u015flem i\u00e7in sitemizin veritaban\u0131na giri\u015f yapaca\u011f\u0131z. Panel \u00fczerinden &#8220;Databases &gt; phpMyAdmin&#8221; yolunu izliyoruz.<\/p>\n\n\n\n<p>phpMyAdmin sayfas\u0131n\u0131 a\u00e7t\u0131ktan sonra sitemizin ba\u011fl\u0131 oldu\u011fu veritaban\u0131n\u0131 a\u00e7\u0131yoruz.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"508\" src=\"http:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-4-1024x508.png\" alt=\"\" class=\"wp-image-947\" srcset=\"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-4-1024x508.png 1024w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-4-300x149.png 300w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-4-768x381.png 768w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-4-1536x762.png 1536w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-4.png 1910w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>Buradan &#8220;wp_users&#8221; tablosuna t\u0131klayarak a\u00e7\u0131yoruz. <\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"503\" src=\"http:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-5-1024x503.png\" alt=\"\" class=\"wp-image-948\" srcset=\"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-5-1024x503.png 1024w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-5-300x147.png 300w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-5-768x377.png 768w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-5-1536x754.png 1536w, https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-content\/uploads\/2024\/01\/image-5.png 1914w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>A\u00e7\u0131lan sayfada &#8220;user_login&#8221; kolonunda yer alan kullan\u0131c\u0131 ad\u0131 bilgisini de\u011fi\u015ftiriyoruz. <\/p>\n\n\n\n<p>Bu i\u015flem i\u00e7in kullan\u0131c\u0131 ad\u0131 yazan k\u0131s\u0131ma \u00e7ift t\u0131klaman\u0131z, a\u00e7\u0131lan pencerede yeni veriyi yaz\u0131p enter tu\u015funa basman\u0131z yeterli olacakt\u0131r.<\/p>\n\n\n\n<p><strong>\u00d6nemli Not: &#8220;Limited Login&#8221; pluginini l\u00fctfen kurmay\u0131 unutmayal\u0131m, o olmadan b\u00fct\u00fcn bu a\u015famalar\u0131n bir anlam\u0131 bulunmuyor :=)<\/strong><\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Web sitelerimize bula\u015fan vir\u00fcs sorununu son olarak &#8220;www.camlikhastanesi.com.tr&#8221; web sitemizde ya\u015fad\u0131k. Hastanelerin web siteleri Sa\u011fl\u0131k Bakanl\u0131\u011f\u0131 Siber G\u00fcvenlik departman\u0131 taraf\u0131ndan s\u0131k\u0131 bir \u015fekilde takip edilmekte oldu\u011funu \u00f6\u011frendik. USOM (Ulusal Siber Olaylara M\u00fcdahele Merkezi) ile yapm\u0131\u015f oldu\u011fumuz g\u00f6r\u00fc\u015fme sonucunda WordPress web sitelerinde yer alan bir a\u00e7\u0131ktan dolay\u0131 &#8220;Brute Force&#8221; denilen sald\u0131r\u0131 y\u00f6ntemini kulland\u0131klar\u0131n\u0131 \u00f6\u011frendik. Bu sald\u0131r\u0131 [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":949,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1,129],"tags":[153,143],"_links":{"self":[{"href":"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-json\/wp\/v2\/posts\/941"}],"collection":[{"href":"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-json\/wp\/v2\/comments?post=941"}],"version-history":[{"count":11,"href":"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-json\/wp\/v2\/posts\/941\/revisions"}],"predecessor-version":[{"id":974,"href":"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-json\/wp\/v2\/posts\/941\/revisions\/974"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-json\/wp\/v2\/media\/949"}],"wp:attachment":[{"href":"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-json\/wp\/v2\/media?parent=941"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-json\/wp\/v2\/categories?post=941"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bl1001.kurguresepsiyon.com\/23042008\/wp-json\/wp\/v2\/tags?post=941"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}