xmlrpc-exploit

Wordpress/Drupal XML Quadratic Blowup proof of concept in nodejs.

Usage

Install first nodejs.

Change the host @ line 18, path @ line 19.

Example website: http://www.example.com/wordpress/

host: 'example.com'
path: 'wordpress/xmlrpc.php'

Then run it by:
node xmlrpc-poc.js