n00py / WPForce

Wordpress Attack Suite
https://www.n00py.io/2017/03/squeezing-the-juice-out-of-a-compromised-wordpress-server/
BSD 2-Clause "Simplified" License
937 stars 221 forks source link

wordpress 4.8 error #3

Closed djo2014 closed 7 years ago

djo2014 commented 7 years ago

i runed yertle python yertle.py -u dddddd -p dddddddd -t http://www.xxxxxx.com --interactive got error Post-exploitation Module for Wordpress

Traceback (most recent call last): File "yertle.py", line 413, in main() File "yertle.py", line 393, in main uploaddir = uploadbackdoor(args.target, args.username, args.password, "shell", args.verbose, args.agent) File "yertle.py", line 29, in uploadbackdoor r = session.post(url, headers=headers, data=payload) File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 535, in post return self.request('POST', url, data=data, json=json, kwargs) File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 488, in request resp = self.send(prep, send_kwargs) File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 630, in send history = [resp for resp in gen] if allow_redirects else [] File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 111, in resolve_redirects raise TooManyRedirects('Exceeded %s redirects.' % self.max_redirects, response=resp) requests.exceptions.TooManyRedirects: Exceeded 30 redirects.

n00py commented 7 years ago

Thanks for opening the issue. I just attempted this with WordPress 4.7, upgraded to WordPress 4.8, and it is still working for me, so I don't think 4.8 is the issue.

I've never got the error

"requests.exceptions.TooManyRedirects: Exceeded 30 redirects" before.

Do you know if:

The username and password are correct? The URL is correct? Are any plugins (security or otherwise) installed?