wordpress_xmlrpc
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| wordpress_xmlrpc [2016/03/04 09:04] – luke7858 | wordpress_xmlrpc [2024/05/23 07:26] (current) – external edit 127.0.0.1 | ||
|---|---|---|---|
| Line 12: | Line 12: | ||
| - Jetpack (an all-in-one solution to slowing down and/or bloating your WordPress site with third-party scripts) | - Jetpack (an all-in-one solution to slowing down and/or bloating your WordPress site with third-party scripts) | ||
| - WP mobile apps | - WP mobile apps | ||
| + | More information on XML-RPC API for wordpress can be found: https:// | ||
| \\ | \\ | ||
| - | ==What is an xmlrpc attack?== | + | \\ |
| + | == What is an xmlrpc attack?== | ||
| xml-rpc can use **// | xml-rpc can use **// | ||
| \\ | \\ | ||
| Line 27: | Line 29: | ||
| **__NOTE__**: | **__NOTE__**: | ||
| \\ | \\ | ||
| - | It can be used with Perl, Java, Python, C, C++, PHP and many other programming languages | + | It can be used with Perl, Java, Python, C, C++, PHP and many other programming languages. |
| \\ | \\ | ||
| \\ | \\ | ||
| + | Checking apache and nginx logs for xmlrpc | ||
| + | \\ | ||
| + | <sxh bash> | ||
| + | awk '/ | ||
| + | </ | ||
| \\ | \\ | ||
| Basic configuration: | Basic configuration: | ||
| <sxh bash> | <sxh bash> | ||
| To prevent xmlrpc attacks add the following to a .htaccess | To prevent xmlrpc attacks add the following to a .htaccess | ||
| - | <sxh bash> | ||
| <Files " | <Files " | ||
| Order Allow,Deny | Order Allow,Deny | ||
| Line 44: | Line 50: | ||
| **__Apache .htaccess: | **__Apache .htaccess: | ||
| <sxh bash> | <sxh bash> | ||
| - | <files xmlrpc.php=""> | + | <Files "xmlrpc.php"> |
| Order Deny,Allow | Order Deny,Allow | ||
| Deny from all | Deny from all | ||
| Line 54: | Line 60: | ||
| \\ | \\ | ||
| **__Nginx__** | **__Nginx__** | ||
| + | \\ | ||
| Deny all through nginx | Deny all through nginx | ||
| <sxh bash> | <sxh bash> | ||
| Line 63: | Line 70: | ||
| </ | </ | ||
| \\ | \\ | ||
| + | \\ | ||
| + | Allowing Wordpress IPs | ||
| + | <sxh bash> | ||
| + | | ||
| + | allow 192.0.64.0/ | ||
| + | deny all; | ||
| + | access_log off; #to prevent from filling up the access log file | ||
| + | error_log off; #to prevent from filling up the error log file | ||
| + | } | ||
| + | </ | ||
| \\ | \\ | ||
| == JetPack == | == JetPack == | ||
| Line 71: | Line 88: | ||
| Jet pack: | Jet pack: | ||
| https:// | https:// | ||
| + | \\ | ||
| \\ | \\ | ||
| \\ | \\ | ||
| === Wordfence === | === Wordfence === | ||
| + | ##CURRENTLY INVESTIGATING ## | ||
| + | \\ | ||
| + | I believe it costs around $5 a month | ||
| + | \\ | ||
| This can also be used to block an attempted attack on XMLRPC | This can also be used to block an attempted attack on XMLRPC | ||
| \\ | \\ | ||
wordpress_xmlrpc.1457082279.txt.gz · Last modified: 2024/05/23 07:26 (external edit)