Sporrdig
commented
3 years ago - -- --=[XML-RPC Brute Force Exploit by 1N3 @ https://crowdshield.com
- -- --=[Brute forcing target: https://linzhi.cn.com/xmlrpc.php with usernames: ['A', 'B', 'C']
user: A
Traceback (most recent call last):
File "./wordpress-xmlrpc-brute-v2.py", line 109, in
if "admin" in attack(entries): File "./wordpress-xmlrpc-brute-v2.py", line 79, in attack return send_request(url, t) File "./wordpress-xmlrpc-brute-v2.py", line 56, in send_request rsp = urllib2.urlopen(req,context=ctx) File "/usr/lib/python2.7/urllib2.py", line 154, in urlopen return opener.open(url, data, timeout) File "/usr/lib/python2.7/urllib2.py", line 435, in open response = meth(req, response) File "/usr/lib/python2.7/urllib2.py", line 548, in http_response 'http', request, response, code, msg, hdrs) File "/usr/lib/python2.7/urllib2.py", line 473, in error return self._call_chain(args) File "/usr/lib/python2.7/urllib2.py", line 407, in _call_chain result = func(args) File "/usr/lib/python2.7/urllib2.py", line 556, in http_error_default raise HTTPError(req.get_full_url(), code, msg, hdrs, fp) urllib2.HTTPError: HTTP Error 403: Forbidden
1N3