n00py/WPForce

wordpress 4.8 error

djo2014 opened this issue · 1 comments

i runed yertle
python yertle.py -u dddddd -p dddddddd -t http://www.xxxxxx.com --interactive
got error
Post-exploitation Module for Wordpress

Traceback (most recent call last):
File "yertle.py", line 413, in
main()
File "yertle.py", line 393, in main
uploaddir = uploadbackdoor(args.target, args.username, args.password, "shell", args.verbose, args.agent)
File "yertle.py", line 29, in uploadbackdoor
r = session.post(url, headers=headers, data=payload)
File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 535, in post
return self.request('POST', url, data=data, json=json, **kwargs)
File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 488, in request
resp = self.send(prep, **send_kwargs)
File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 630, in send
history = [resp for resp in gen] if allow_redirects else []
File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 111, in resolve_redirects
raise TooManyRedirects('Exceeded %s redirects.' % self.max_redirects, response=resp)
requests.exceptions.TooManyRedirects: Exceeded 30 redirects.

n00py commented

Thanks for opening the issue. I just attempted this with WordPress 4.7, upgraded to WordPress 4.8, and it is still working for me, so I don't think 4.8 is the issue.

I've never got the error

"requests.exceptions.TooManyRedirects: Exceeded 30 redirects" before.

Do you know if:

The username and password are correct?
The URL is correct?
Are any plugins (security or otherwise) installed?