Last time I did, I found so many "hack-sites" teaching me and offering software/freeware/shareware to do all kinds of stuff to all kinds of computers.
I only DL a war-dialer; it make calls to designated telephone numbers on regular basis, every minute, at intervals, or any combination. So, if anyone/any company plays punk with me, I just find myself a nice computer and let it do its work!!
But seriously, just by accessing those sites can be dangerous; make sure your firewall and anti-virus is strong bro.
you can very very seldom download hacktools without virus and trojan. for me, i just run it under safe-try mode then revert it back after i finished doing my job. why not place the blog here and we shall all try it together.
Hacking your friend's password may be a his challenge, but do understand that his blog isn't his exclusive property and is hosted on the wordpress site server. So any attempts to run scripts to hack his blog could be seen as an attempt to hack the site. So do be careful.