[Saburu_Arisaka]

Was running your usual scans and decided to hit it with a web crawler. The crawler returned the wordpress login page for the admin of the site.
I though about using hydra or something, but I'm not sure.

Anyone have any ideas?

[The Amazing Sinner]

You can run a dictionary attack with WPScan, have you heard of that?

First, you have to enumerate the WordPress users.
The WordPress user enumeration tool is used the retrieve a list of registered WordPress users for the target host:

Code

wpscan –url [wordpress url]–enumerate u

Use the following command to brute force the password for user root:

Code

wpscan –url [wordpress url]–wordlist [path to wordlist]–username [username to brute force]–threads [number of threads to use]

[Saburu_Arisaka]

I will try this an let you know how it turns out. Is it possible to run it with proxychains?

[The Amazing Sinner]

I will try this an let you know how it turns out. Is it possible to run it with proxychains?

Yes sir, I have a tutorial on how to use proxychains in Kali Linux.
https://hackforums.net/showthread.php?tid=6105052

Cheers.