XMLRPC Bruteforcer - An XMLRPC Brute Forcer Targeting Wordpress
An XMLRPC brute forcer targeting Wordpress written in Python 3. In the context of xmlrpc brute forcing, its faster than Hydra and WpScan. It can brute force 1000 passwords per second.
Usage
python3 xmlrcpbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt username
python3 xmlrpcbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt userlist.txt
Bugs
If you get an
xml.etree.ElementTree.ParseError
:- Did you forget to add 'xmlrpc' in the url ?
- Try to add or remove 'https' or 'www'.
Screenshot
Via: feedproxy.google.com
XMLRPC Bruteforcer - An XMLRPC Brute Forcer Targeting Wordpress
Reviewed by Anónimo
on
9:37
Rating: