← All tools

xmlrpc-bruteforcer

https://github.com/aress31/xmlrpc-bruteforcer

Open Source

Categories

Web Application

Description

Multi-threaded XMLRPC brute forcer using amplification attacks targeting WordPress installations prior to version 4.4.

Keywords

bruteforce bruteforce-amplification-attack multicall pentesting python wordpress xmlrpc-bruteforcer xmlrpc-interface

Example Usage

cd .\xmlrpc-bruteforcer
docker build -t xmlrpc-bruteforcer .
docker run --rm -v $(pwd):/wordlists xmlrpc-bruteforcer -u admin -w /wordlists/wordlist.txt -t 3 -x https://wordpress.local/xmlrpc.php

See also

Pentest-Swarm-AI

Open Source

Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, explo…

GraphQL Voyager / InQL

Open Source

InQL is a Burp Suite and standalone GraphQL security scanner. Analyzes introspection queries, genera…

JWT_Tool

Open Source

Toolkit for testing, tampering, and forging JSON Web Tokens. Tests common JWT vulnerabilities includ…

xurlfind3r

Open Source

A command-line utility designed to discover URLs for a given domain in a simple, efficient way. It w…

ffuf

Open Source Kali

Fast web fuzzer written in Go. Supports directory discovery, parameter fuzzing, virtual host discove…

BurpAPISecuritySuite

Open Source

Burp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzi…