Skip to content

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 
 
 

Repository files navigation

wordpress_xmlrpc_exploit

Created on 2014-07-30
Title: WordPress xmlrpc 利用工具
author: qingxp9
weibo: http://weibo.com/qingxp9/

Wordpress中通过xmlrpc.php提供的接口尝试猜解用户的密码,可以绕过wordpress对暴力破解的限制,漏洞详情请查看:
http://www.freebuf.com/articles/web/38861.html
http://blog.tigertech.net/posts/blocking-wordpress-xmlrpc-password-attempts/

说明:
1.在本文件同目录下新建usernames.txt、passwords.txt分别存入用户名、密码字典
2.按提示输入WordPress站点(例如:www.flincllck.com)

Releases

Packages

Contributors