mcdruid/wapuu-the-ripper

A password cracker for WordPress

v0.1.0 2019-12-03 17:21 UTC

Requires

• wp-cli/wp-cli: >=2.0

Requires (Dev)

• behat/behat: ~2.5

MIT

README

A password cracker for WordPress (WP-CLI)

Quick links: Using | Installing | Credits

Using

NAME

wp wtr

DESCRIPTION

Wapuu the Ripper - a tool to crack user passwords.

SYNOPSIS

wp wtr [--role=<role>] [--<field>=<value>] [--top=<top>] [--all] [--hide] [--no-guessing]

Based on Drop the Ripper for Drupal.

Users can be filtered via arguments supported by WP_User_Query().

OPTIONS

[--role=<role>] Only check users with a certain role.

[--<field>=<value>] Filter users by one or more arguments of WP_User_Query().

[--top=<top>] Use the top x passwords from the wordlist (default is 25).

[--all] Use all of the passwords from the wordlist.

[--hide] Do not show plaintext passwords in output.

[--no-guessing] Disables built-in password guessing (e.g. username as password).

[--wordlist=<wordlist>] Path to a custom wordlist (default is openwall's password list).

EXAMPLES

wp wtr

wp wtr --top=100 --role=administrator

wp wtr --all --role__not_in=subscriber

wp wtr --exclude=1 --hide

wp wrt --wordlist=/tmp/rockyou.txt --include=2,3,4

Installing

You can install this package with:

wp package install [e-mail]:mcdruid/wapuu-the-ripper.git

Credits

• WtR uses a default wordlist from http://www.openwall.com/wordlists
• https://ayesh.me/ for suggesting the name!