Hack Forums
wordpress bf slows down - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: wordpress bf slows down (/showthread.php?tid=6183560)



wordpress bf slows down - SIM-5109418 - Dec 3, 2021

Hey i'm trying to brute force a wordpress login with hydra but something (i think it's cloudflare) blocks the attack. Anyone knows a way around this?


RE: wordpress bf slows down - linkinpork - Dec 3, 2021

(Dec 3, 2021 09:04 AM)maxxam111 Wrote:  Hey i'm trying to brute force a wordpress login with hydra but something (i think it's cloudflare) blocks the attack. Anyone knows a way around this?

In Wordpress, if your dictionary is so big that it gets you rate-limited, you're doing it wrong. Wordpress user lists are too small to be worth bruteforcing with thousands of entries, not to mention you're expecting a huge jump in traffic.

Try lowering your request rate. Also make a more targeted user list instead of tossing 25 megabytes into it in one go. Do some reconnaissance beforehand on whom the users are.