1N3 / Wordpress-XMLRPC-Brute-Force-Exploit

Wordpress XMLRPC System Multicall Brute Force Exploit (0day) by 1N3 @ CrowdShield
https://crowdshield.com
444 stars 198 forks source link

error when using large password list. #6

Closed mother2110 closed 7 years ago

mother2110 commented 7 years ago
mother2110 commented 7 years ago

No comment

1N3 commented 7 years ago

Sorry man, saw this in the backlog and was quite old.. my apologies. I don't usually check on here frequently.

Based on the error above, it's getting a urlopen error which seems to indicate the connection drops to the site when sending the request. You could try altering the amount of passwords to send per request (currently it's 1000/request) to a lower number to see if that helps. Outside of this, something is causing the connection to drop which may be specific to that target.

spyder-7 commented 7 years ago

Hi 1N3, Facing same problem: Trying it on localhost: error below with a small wordlist (the default wordlist included) user: admin Traceback (most recent call last): File "wordpress-xmlrpc-brute.py", line 109, in if "admin" in attack(entries): File "wordpress-xmlrpc-brute.py", line 79, in attack return send_request(url, t) File "wordpress-xmlrpc-brute.py", line 56, in send_request rsp = urllib2.urlopen(req,context=ctx) File "/usr/lib/python2.7/urllib2.py", line 154, in urlopen return opener.open(url, data, timeout) File "/usr/lib/python2.7/urllib2.py", line 435, in open response = meth(req, response) File "/usr/lib/python2.7/urllib2.py", line 548, in http_response 'http', request, response, code, msg, hdrs) File "/usr/lib/python2.7/urllib2.py", line 473, in error return self._call_chain(args) File "/usr/lib/python2.7/urllib2.py", line 407, in _call_chain result = func(args) File "/usr/lib/python2.7/urllib2.py", line 556, in http_error_default raise HTTPError(req.get_full_url(), code, msg, hdrs, fp) urllib2.HTTPError: HTTP Error 500: Internal Server Error

Any Help? Thanks.

1N3 commented 7 years ago

Which version of Wordpress are you running it against? It appears to be getting a 500: internal error which indicates an issue with the webserver or wordpress install. If XMLRPC requests are disabled or you're running on a patched version, you might get this error as well.

1N3 commented 7 years ago

Closing out for now.