kavishgr / xmlrpc-bruteforcer Goto Github PK

I get this error after entering the line: python3 xmlrcpbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt username

python3: can't open file 'xmlrcpbruteforce.py': [Errno 2] No such file or directory

The userlist option is not applied. Instead, the file name is used as the username.

python3 xmlrpcbruteforce.py https://www.lan-monitor.de/xmlrpc.php passwords.txt userlist.txt

do release to permit people be notify when new stable version is release

Hello,

First of all, thank you for your work !
However it does not work until the end .. ;)

I created a user, administrator with an easy password.
This password is present in the list of passwords tried.

The bruteforce script runs in the background, but does not validate any password.

Passwords are in a text file, with a line break between each:

And the website is my property, no security guidelines. It's an almost empty wordpress

So, what should i do ?

Thanks,
Vincent

Hi!

I think that can be useful to accept a list of wordpress site as input. In this way the bruteforce is more efficient since the wordlists are parsed once but the request is replicate for each site.

I think that will get more results if it first scans for the actual user then bruteforce it ..

some site it work, now i get this error:

--=[Starting...]=--
Traceback (most recent call last):
File "xmlrpcbruteforce.py", line 156, in
main(sys.argv)
File "xmlrpcbruteforce.py", line 134, in main
found, index = parse_response(response)
File "xmlrpcbruteforce.py", line 44, in parse_response
root = ET.fromstring(data)
File "/usr/lib/python3.7/xml/etree/ElementTree.py", line 1315, in XML
parser.feed(text)
xml.etree.ElementTree.ParseError: syntax error: line 1, column 49

I always get Failed as message:

--=[Target: http://192.xxxxx/xmlrpc.php]=--
--=[Starting...]=--
--=[Failed]=--

Does this mean as an error or does this mean it did not find any result? Because its so fast it looks like error , but it could be the message of result. I ask to make sure.