xmlrpc-bruteforcer

Multi-threaded XMLRPC brute forcer using amplification attacks targeting WordPress installations prior to version 4.4. Maintained by aress31 on GitHub, where it has earned 146 stars from the community.

It's actively developed around bruteforce, bruteforce-amplification-attack, multicall, and is a solid reference for anyone building with these tools.