Failure at runtime

[MedAlch]

Hi, When running the tool on a website having a XMLRPC file, I encounter the following error :

• -- --=[Brute forcing target: ***/xmlrpc.php with usernames: ['admin'] user: admin Traceback (most recent call last): File "./wordpress-xmlrpc-brute-v2.py", line 104, in if "admin" in attack(entries): File "./wordpress-xmlrpc-brute-v2.py", line 79, in attack return send_request(url, t) File "./wordpress-xmlrpc-brute-v2.py", line 56, in send_request rsp = urllib2.urlopen(req,context=ctx) File "/usr/lib/python2.7/urllib2.py", line 154, in urlopen return opener.open(url, data, timeout) File "/usr/lib/python2.7/urllib2.py", line 429, in open response = self._open(req, data) File "/usr/lib/python2.7/urllib2.py", line 447, in _open '_open', req) File "/usr/lib/python2.7/urllib2.py", line 407, in _call_chain result = func(*args) File "/usr/lib/python2.7/urllib2.py", line 1228, in http_open return self.do_open(httplib.HTTPConnection, req) File "/usr/lib/python2.7/urllib2.py", line 1198, in do_open raise URLError(err) urllib2.URLError: <urlopen error [Errno 104] Connection reset by peer>

Any idea about a fix for this ? :) Thank you very much

[MedAlch]

I ran the script on the same target from a different OS. Here is the output :

• -- --=[Brute forcing target: ****/xmlrpc.php with usernames: ['admin'] user: admin Traceback (most recent call last): File "./wordpress-xmlrpc-brute-v2.py", line 109, in if "admin" in attack(entries): File "./wordpress-xmlrpc-brute-v2.py", line 79, in attack return send_request(url, t) File "./wordpress-xmlrpc-brute-v2.py", line 56, in send_request rsp = urllib2.urlopen(req,context=ctx) File "/usr/lib/python2.7/urllib2.py", line 154, in urlopen return opener.open(url, data, timeout) File "/usr/lib/python2.7/urllib2.py", line 435, in open response = meth(req, response) File "/usr/lib/python2.7/urllib2.py", line 548, in http_response 'http', request, response, code, msg, hdrs) File "/usr/lib/python2.7/urllib2.py", line 473, in error return self._call_chain(args) File "/usr/lib/python2.7/urllib2.py", line 407, in _call_chain result = func(args) File "/usr/lib/python2.7/urllib2.py", line 556, in http_error_default raise HTTPError(req.get_full_url(), code, msg, hdrs, fp) urllib2.HTTPError: HTTP Error 403: Forbidden

Could it be linked to this kind of issue : https://stackoverflow.com/questions/13303449/urllib2-httperror-http-error-403-forbidden ?

[1N3]

403 means access was denied which usually means the site has been patched.