A powerful tool for validating and cracking WordPress login credentials.
WpCracker is a versatile tool designed to validate and crack WordPress login credentials. It supports multiple input formats and allows silent password testing. Results are categorized into separate files for easy analysis.
- Credential Validation: Checks username and password combinations on WordPress sites.
- Silent Cracking: Tests a password list to find valid credentials.
- Multithreading: Uses multiple threads to speed up the verification process.
- Supported Formats:
host|user|pass
host;user;pass
host:user:pass
host user pass
(space-separated)host#username@password
http://host#username@password
https://host#username@password
- Organized Results: Valid credentials are saved in
Good_WP.txt
, and failed attempts inBad_WP.txt
.
-
Clone the repository:
git clone https://github.com/HackfutSec/WpCracker.git cd WpCracker
-
Install dependencies:
pip install -r requirements.txt
-
Run the script:
python WpCracker.py
-
Run the script:
python WpCracker.py
-
Choose the format of your credential list (e.g.,
host|user|pass
). -
Enter the path to the file containing the credentials.
-
If a login fails, you can provide a password list to test.
-
Results will be saved in:
Good_WP.txt
: Valid credentials.Bad_WP.txt
: Failed login attempts.
WpCracker/
├── WpCracker.py # Main script
├── requirements.txt # Python dependencies
├── Good_WP.txt # File for valid credentials
├── Bad_WP.txt # File for failed attempts
├── assets/ # Folder for images (banner, etc.)
└── README.md # Documentation
example.com|admin|password123
example.com|user|password456
example.com#admin@password123
http://example.com#admin@password456
https://example.com#admin@password789
This project is licensed under the MIT License. See the LICENSE file for details.
Contributions are welcome! If you'd like to improve this project, follow these steps:
- Fork the project.
- Create a feature branch (
git checkout -b feature/AmazingFeature
). - Commit your changes (
git commit -m 'Add some AmazingFeature'
). - Push the branch (
git push origin feature/AmazingFeature
). - Open a Pull Request.
If you have questions or suggestions, feel free to reach out:
- Email: hackfut404
- GitHub: HackfutSec
- Telegram: @Hackfut
Thanks to everyone who contributed to this project! Your support is greatly appreciated.
WpCracker is a powerful tool for WordPress security testing. Use it responsibly and only on systems you have explicit permission to test.
⭐ If you like this project, don't forget to give it a star on GitHub!
- Ensure you have proper authorization before using this tool.
- This tool is intended for educational purposes and legitimate security testing.
Happy Hacking! 🚀