This is a small PoC exploit to launch a brute force amplification attack on affected WordPress sites.
Usage: ./wp-xml-brute http://target.com/xmlrpc.php
Download: https://github.com/1N3/Wordpress-XMLRPC-Brute-Force-Exploit
Posts archive for October, 2015
xer0dayz Blog
Products
-
Sn1per Professional v7.0
$99.00
Recent Posts
- Sn1per Professional v7.0 Released! May 31, 2019
- Sn1per Community Edition v7.0 Released! May 8, 2019
- Sn1per Professional v6.0 now available! December 17, 2018
- Bug Bounty Recon Like A Pro October 9, 2018
- IPSwitch MoveIt Stored Cross Site Scripting (XSS) January 15, 2018
- Exploiting Python Deserialization Vulnerabilities September 4, 2017
- Exploiting Path Traversal in PSPDFKit for Android (2.3.3 – 2.8.0) August 11, 2017
- Advanced Client Side Exploitation Using BeEF April 15, 2017
- Aruba Networks AP-205 (Multiple Vulnerabilities) February 17, 2017
- WordPress 4.7.0 – 4.7.1 REST API Content Injection Exploit February 1, 2017
- Dirty COW EoP PoC (CVE-2016-5195) October 24, 2016
- CVE-2016-4401 – Unauthenticated Database Credential Leak In Aruba ClearPass October 17, 2016
- Zabbix 2.2.x, 3.0.x SQL Injection/RCE 0day Vulnerability August 17, 2016
- Droopy Boot2Root CTF Solution May 15, 2016
- Exploiting PHP Serialization/Object Injection Vulnerabilities April 15, 2016