Brute Force Amplification Attacks/XML-RPC Pingback Vulnerability against WP xmlrpc

A new type of attack has been reported against wordpress called the BRUTE FORCE AMPLIFICATION ATTACK or the XML-RPC Pingback Vulnerability.It mainly affects the ‘xmlrpc.php’ file.

Brute force attacks are very popular attacks on internet as we are on a server online via protocols such as SSH,FTP etc.This technique allows the attackers to try a large variety of wordpress username and password combinations in a single HTTP request instead of attacking the wp-login.php file which can be easily protected via .htaccess file.

Before going into the details of this attack first you should know about the xmlrpc file.

Read More : Brute Force Amplification Attacks/XML-RPC Pingback Vulnerability against WP xmlrpc