Sha256: 58090b5dca50727f29c72d897e81bc3e81d517b8b1b750a2b4a91d46cf012d99
Contents?: true
Size: 621 Bytes
Versions: 10
Compression:
Stored size: 621 Bytes
Contents
module WPScan
module Finders
module Passwords
# Password attack against the XMLRPC interface
class XMLRPC < CMSScanner::Finders::Finder
include CMSScanner::Finders::Finder::BreadthFirstDictionaryAttack
def login_request(username, password)
target.method_call('wp.getUsersBlogs', [username, password])
end
def valid_credentials?(response)
response.code == 200 && response.body =~ /blogName/
end
def errored_response?(response)
response.code != 200 && response.body !~ /login_error/i
end
end
end
end
end
Version data entries
10 entries across 10 versions & 1 rubygems