Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/1n3/wordpress-xmlrpc-brute-force-exploit
Wordpress XMLRPC System Multicall Brute Force Exploit (0day) by 1N3 @ CrowdShield
https://github.com/1n3/wordpress-xmlrpc-brute-force-exploit
0day exploit poc wordpress wordpress-xmlrpc xml-rpc
Last synced: 4 days ago
JSON representation
Wordpress XMLRPC System Multicall Brute Force Exploit (0day) by 1N3 @ CrowdShield
- Host: GitHub
- URL: https://github.com/1n3/wordpress-xmlrpc-brute-force-exploit
- Owner: 1N3
- Created: 2015-10-18T19:42:23.000Z (about 9 years ago)
- Default Branch: master
- Last Pushed: 2022-05-31T19:09:08.000Z (over 2 years ago)
- Last Synced: 2024-12-14T08:05:19.590Z (11 days ago)
- Topics: 0day, exploit, poc, wordpress, wordpress-xmlrpc, xml-rpc
- Language: Python
- Homepage: https://crowdshield.com
- Size: 22.5 KB
- Stars: 454
- Watchers: 39
- Forks: 197
- Open Issues: 3
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
Wordpress XMLRPC System Multicall Brute Force Exploit by 1N3
Last Updated: 20170215
https://crowdshield.com## ABOUT:
This is an exploit for Wordpress xmlrpc.php System Multicall function affecting the most current version of Wordpress (3.5.1). The exploit works by sending 1,000+ auth attempts per request to xmlrpc.php in order to "brute force" valid Wordpress users and will iterate through whole wordlists until a valid user response is acquired. It will then selectively acquire and display the valid username and password to login.## USAGE:
```
./wp-xml-brute http://target.com/xmlrpc.php passwords.txt username1 [username2] [username3]...
```## LICENSE:
This software is free to distribute, modify and use with the condition that credit is provided to the creator (1N3@CrowdShield) and is not for commercial use.## DONATIONS:
Donations are welcome. This will help fascilitate improved features, frequent updates and better overall support.
- [x] BTC 1Fav36btfmdrYpCAR65XjKHhxuJJwFyKum
- [x] DASH XoWYdMDGb7UZmzuLviQYtUGb5MNXSkqvXG
- [x] ETH 0x20bB09273702eaBDFbEE9809473Fd04b969a794d
- [x] LTC LQ6mPewec3xeLBYMdRP4yzeta6b9urqs2f