Wordpress-XMLRPC-Brute-Force-Exploit

1N3의 Wordpress XMLRPC System Multicall 무차별 대입 공격 익스플로잇 마지막 업데이트: 20170215 https://crowdshield.com 개요: 이것은 가장 최신 버전의 Wordpress3.5.1에 영향을 주는 Wordpress xmlrpc.php System Multicall 함수를 위한 익스플로잇입니다. 이 익스플로잇은 유효한 Wordpress 사용자를 "무차별 대입"하기 위해 요청당 1,000회 이상의 인증 시도를 xmlrpc.php에 보내며, 유효한 사용자 응답을 얻을 때까지 전체 ...

Tucows (VDP): Vulnerability: XML-RPC Interface Enabled and Accessible

Summary The website ███ has the XMLRPC interface enabled which exposes several methods including pingbackping and systemmulticall These methods can be abused by attackers to perform high volume denial of service DDoS attacks and brute force amplification attacks which can severely impact the...

WordPress XMLRPC 3.9.2 Denial of Service

WordPress version 3.9.2 XMLRPC proof of concept denial of service exploit that leverages a vulnerability from 2014 and was originally discovered by Nir Goldshlager...

PT-2020-5780 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.5.2 Description: The issue is related to a lack of privilege management mechanism in the wp-includes/class-wp-xmlrpc-server.php component of the WordPress content management system. This allows attackers to gain...