Hey i'm trying to brute force a wordpress login with hydra but something (i think it's cloudflare) blocks the attack. Anyone knows a way around this?
wordpress bf slows down |
 (Dec 3, 2021 09:04 AM)SIM-5109418 Wrote: Hey i'm trying to brute force a wordpress login with hydra but something (i think it's cloudflare) blocks the attack. Anyone knows a way around this? In Wordpress, if your dictionary is so big that it gets you rate-limited, you're doing it wrong. Wordpress user lists are too small to be worth bruteforcing with thousands of entries, not to mention you're expecting a huge jump in traffic. Try lowering your request rate. Also make a more targeted user list instead of tossing 25 megabytes into it in one go. Do some reconnaissance beforehand on whom the users are.
Regards,
Porky ℒ𝒶𝓊ℊ𝒽𝒾𝓃ℊ 𝒶𝓉 𝓎ℴ𝓊𝓇 𝓈ℯ𝒸𝓊𝓇𝒾𝓉𝓎 𝓈𝒾𝓃𝒸ℯ... ℯ𝓋ℯ𝓇. |
|
|
