Home / Brute-force / WordPress / WordPress Brute Force / XML-RPC / Wordbrutepress - Wordpress Brute Force Multithreading with Standard and XML-RPC Login Method

Wordbrutepress - Wordpress Brute Force Multithreading with Standard and XML-RPC Login Method

| Post sponsored by FaradaySEC | Multiuser Pentest Environment
Wordpress Brute Force Multithreading with standard and xml-rpc login method written in python.

Features:
  1. Multithreading
  2. xml-rpc brute force mode
  3. http and https protocols support
  4. Random User Agent
  5. Big wordlist support

Usage: 
Standard login request:

python wordbrutepress.py -S -t http[s]://target.com[:port] -u username -w wordlist [--timeout in sec]

Xml-rpc login request:

python wordbrutepress.py -X -t http[s]://target.com[:port] -u username -w wordlist [--timeout in sec]

CHANGELOG 
 2015-11-20 v2.1
 1) Add new feature: Big wordlist support (thanks to guly @theguly)
 2) Fix faultcode check instead of "403" code for XML-RPC (thanks to guly @theguly)

 2015-04-12 v2.0
 1) Add new feature: xml-rpc brute force mode
 2) Fix minor bugs

 2015-04-11 v1.1
 1) optparse (Deprecated since version 2.7) replaced by argparse
 2) Fix connection bugs


Wordbrutepress - Wordpress Brute Force Multithreading with Standard and XML-RPC Login Method Wordbrutepress - Wordpress Brute Force Multithreading with Standard and XML-RPC Login Method Reviewed by Zion3R on 5:52 PM Rating: 5