#xmlrpc — Public Fediverse posts

🚨 Stop the presses! A cache ratio "detective" discovers 288,493 requests and becomes the Sherlock Holmes of XML-RPC brute force attacks. 🕵️‍♂️🔍 Because apparently, no one else noticed the tsunami of POST requests from a single IP until the cache ratio whispered the secret. 🤦‍♂️🌊
https://marcindudek.dev/blog/xmlrpc-brute-force-cache-rate/ #cachedetective #XMLRPC #brute-force #security #SherlockHolmes #technews #HackerNews #ngated

🚨 Stop the presses! A cache ratio "detective" discovers 288,493 requests and becomes the Sherlock Holmes of XML-RPC brute force attacks. 🕵️‍♂️🔍 Because apparently, no one else noticed the tsunami of POST requests from a single IP until the cache ratio whispered the secret. 🤦‍♂️🌊
https://marcindudek.dev/blog/xmlrpc-brute-force-cache-rate/ #cachedetective #XMLRPC #brute-force #security #SherlockHolmes #technews #HackerNews #ngated

288,493 Requests – How I Spotted an XML-RPC Brute Force from a Weird Cache Ratio

https://marcindudek.dev/blog/xmlrpc-brute-force-cache-rate/

#HackerNews #XMLRPC #BruteForce #CacheRatio #Security #Analysis #Cybersecurity #TechInsights

288,493 Requests – How I Spotted an XML-RPC Brute Force from a Weird Cache Ratio

https://marcindudek.dev/blog/xmlrpc-brute-force-cache-rate/

#HackerNews #XMLRPC #BruteForce #CacheRatio #Security #Analysis #Cybersecurity #TechInsights

Ich habe mir vorgenommen, wieder häufiger zu bloggen und bin dabei direkt in ein Problem gelaufen:
Stolperstein 2FA bei WordPress-Zugriff per XML-RPC (Wordfence)
https://schacknetz.de/stolperstein-2fa-bei-wordpress-zugriff-per-xml-rpc-wordfence/

#Wordpress #Wordfence #2FA #XMLRPC #MarsEdit

Ich habe mir vorgenommen, wieder häufiger zu bloggen und bin dabei direkt in ein Problem gelaufen:
Stolperstein 2FA bei WordPress-Zugriff per XML-RPC (Wordfence)
https://schacknetz.de/stolperstein-2fa-bei-wordpress-zugriff-per-xml-rpc-wordfence/

#Wordpress #Wordfence #2FA #XMLRPC #MarsEdit

after working months on API and architecture improvements, I've published version 0.8.0 of `dxr`, my #xmlrpc implementation for #Rust :pensive_party_blob:

the public API hasn't changed *much*, but it should be nicer to use for some cases. also, internal implementation details no longer leak into the public API - I finally managed to decouple XML de/serialization from the public types 😊

release notes: https://codeberg.org/decathorpe/dxr/releases/tag/v0.8.0

phew, I'm glad this won't be banging around in my head any more.

after working months on API and architecture improvements, I've published version 0.8.0 of `dxr`, my #xmlrpc implementation for #Rust :pensive_party_blob:

the public API hasn't changed *much*, but it should be nicer to use for some cases. also, internal implementation details no longer leak into the public API - I finally managed to decouple XML de/serialization from the public types 😊

release notes: https://codeberg.org/decathorpe/dxr/releases/tag/v0.8.0

phew, I'm glad this won't be banging around in my head any more.

Odoo XMLRPC CRUD: Unlock 5 proven steps to master external integration and automate your Odoo data operations. #Odoo #XMLRPC #Integration #Automation #APIs

https://teguhteja.id/odoo-xmlrpc-crud-proven-steps/?utm_source=mastodon&utm_medium=jetpack_social

Odoo XMLRPC CRUD: Unlock 5 proven steps to master external integration and automate your Odoo data operations. #Odoo #XMLRPC #Integration #Automation #APIs

https://teguhteja.id/odoo-xmlrpc-crud-proven-steps/?utm_source=mastodon&utm_medium=jetpack_social

dxr 0.7.0 is out! 🎉

it's a framework for writing #XMLRPC clients and servers in #Rust, with a modern, ergonomic, and type-safe API - for those of us who still need to Interface with "legacy" systems but don't want to be stuck using "legacy" programming languages too :emoji_wink:

release notes: https://github.com/ironthree/dxr/releases/tag/0.7.0

dxr 0.7.0 is out! 🎉

it's a framework for writing #XMLRPC clients and servers in #Rust, with a modern, ergonomic, and type-safe API - for those of us who still need to Interface with "legacy" systems but don't want to be stuck using "legacy" programming languages too :emoji_wink:

release notes: https://github.com/ironthree/dxr/releases/tag/0.7.0

XML-RPC npm Library Turns Malicious, Steals Data, Deploys Crypto Miner – Source:thehackernews.com https://ciso2ciso.com/xml-rpc-npm-library-turns-malicious-steals-data-deploys-crypto-miner-sourcethehackernews-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #TheHackerNews #XMLRPC

XML-RPC npm Library Turns Malicious, Steals Data, Deploys Crypto Miner – Source:thehackernews.com https://ciso2ciso.com/xml-rpc-npm-library-turns-malicious-steals-data-deploys-crypto-miner-sourcethehackernews-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #TheHackerNews #XMLRPC

XMLRPC npm Library Turns Malicious, Steals Data, Deploys Crypto Miner – Source:thehackernews.com https://ciso2ciso.com/xmlrpc-npm-library-turns-malicious-steals-data-deploys-crypto-miner-sourcethehackernews-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #TheHackerNews #XMLRPC

XMLRPC npm Library Turns Malicious, Steals Data, Deploys Crypto Miner – Source:thehackernews.com https://ciso2ciso.com/xmlrpc-npm-library-turns-malicious-steals-data-deploys-crypto-miner-sourcethehackernews-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #TheHackerNews #XMLRPC

XML-RPC: вызываем все, везде и сразу

У нас было пятьдесят операционных систем, десяток языков программирования и бесконечное множество библиотек и фреймворков всех сортов и расцветок, а также кофе, немного времени и щепотка здравого смысла. Не то чтобы это был необходимый запас для сетевой разработки, но раз уж начал коллекционировать дичь, то сложно остановиться.. Сделать вызов

https://habr.com/ru/articles/837942/

#java #xmlrpc

We need an #RSS reader with "Reply" and "Repost" buttons. These actions would occur on a blog you connect with #Micropub or #XMLRPC, and use #WebMentions to notify the originating site.

We need an #RSS reader with "Reply" and "Repost" buttons. These actions would occur on a blog you connect with #Micropub or #XMLRPC, and use #WebMentions to notify the originating site.

Just pushed an update to my #Wordpress plugin for restricting admin panel and #XMLRPC access to specific countries. You can now totally disable access to XMLRPC if it's not used, which saves from having to do country lookups on any of the traffic hitting it, and thus helps keep you within your free lookups quota 👍

https://wordpress.org/plugins/admin-country-allowlist/

REST reconsidered: A lament on how the distributed systems term REST has gotten watered down
https://htmx.org/essays/how-did-rest-come-to-mean-the-opposite-of-rest/
#webservices #programming #xmlrpc #soap #rest #http #rpc #api #+

“Pingsville"

I'm working with the garage door open.

https://github.com/jsit/pingsville-ping

A #Deno- and #MongoDB-based #XMLRPC server for blog pings, a la Technorati.

If this area is of interest to you, please fork and play around with this.

#Pingsville

“Pingsville"

I'm working with the garage door open.

https://github.com/jsit/pingsville-ping

A #Deno- and #MongoDB-based #XMLRPC server for blog pings, a la Technorati.

If this area is of interest to you, please fork and play around with this.

#Pingsville

I have a tiny node server running that correctly receives weblogUpdates.ping and logs the values to the console.

Next to save them into a database of some kind, then write a frontend that does something with it.

#blogging #xmlrpc

I have a tiny node server running that correctly receives weblogUpdates.ping and logs the values to the console.

Next to save them into a database of some kind, then write a frontend that does something with it.

#blogging #xmlrpc

What the fuck, #XMLRPC plugin?

Worse, it seemed to have been enabled by default...

#wordpress #rss

What the fuck, #XMLRPC plugin?

Worse, it seemed to have been enabled by default...

#wordpress #rss

@fuzzix I have bad news for you: #SOAP came out of that same era. It was an over-engineered adaptation by #Microsoft and @w3c of @davew’s #XMLRPC

Mind you, the entire #XML-based #WebServices stack of standards is being re-accreted on top of #JSON with efforts like #OpenAPI and JSON Schema. The final and once-again neglected piece is automated service discovery à la #UDDI

Okay, so anyone know a good tool for importing your #twitter archive to #Wordpress via the #wordpresss #xmlrpc or #REST api? I loved the idea of @shawnhooper's tool, but putting on #DreamHost & running it via command line times out cos my archive is too big and the format is not great for me. (haven't found a good theme that will format tweets)

I would love a tool that allows me to run it remotely from terminal in my macos with my data local and feeds it into a remote wordpress installation.

Okay, so anyone know a good tool for importing your #twitter archive to #Wordpress via the #wordpresss #xmlrpc or #REST api? I loved the idea of @shawnhooper's tool, but putting on #DreamHost & running it via command line times out cos my archive is too big and the format is not great for me. (haven't found a good theme that will format tweets)

I would love a tool that allows me to run it remotely from terminal in my macos with my data local and feeds it into a remote wordpress installation.

Fail2WP 1.2.0 for WordPress is out, supporting WP 6.1 and PHP 8.1. New features include login IP-blocking and XMLRPC protection 😊🤟🔒

https://wordpress.org/plugins/fail2wp

#wordpress #wordpressplugin #fail2ban #fail2wp #cybersec #cybersecurity #xmlrpc #ddos #dos #foss #oss #opensource

Fail2WP 1.2.0 for WordPress is out, supporting WP 6.1 and PHP 8.1. New features include login IP-blocking and XMLRPC protection 😊🤟🔒

https://wordpress.org/plugins/fail2wp

#wordpress #wordpressplugin #fail2ban #fail2wp #cybersec #cybersecurity #xmlrpc #ddos #dos #foss #oss #opensource

My little #Patchfox server just passed #XMLRPC validation...

This is a from scratch rewrite of Patchfox #SSB client as a RPC server. Currently supporting both XML-RPC and JSON-RPC.

#SecureScuttlebutt

My little #Patchfox server just passed #XMLRPC validation...

This is a from scratch rewrite of Patchfox #SSB client as a RPC server. Currently supporting both XML-RPC and JSON-RPC.

#SecureScuttlebutt

Ha! Implemented my own metaWeblog API server so that I can use desktop apps such as Mars Edit to post to my static-generated blog.

https://andregarzia.com/2022/05/Got-metaWeblog-API-working-with-Pollen.html

Yay! AMA

#xmlrpc #metaweblog #blogging

Onto implementing decoding for the structs today.

#Golang #XMLRPC

I implemented the decoding for Arrays finally. Next it Structs now.

https://github.com/ankitrgadiya/xmlrpc/pull/1/

#XMLRPC #Golang

#XMLRPC Implementation in #Golang: Figured out a way to implement custom Unmarshaler for dynamic values with user-given datatypes. I'm kinda proud of it 😅.

I implemented the decoding for primitive datatypes, just need to implement structs and arrays now.

For decoding #XMLRPC, I want to expose functionality for caller to specify a list of parameter types to parse the values into. But I don't know how to implement it by implementing the Unmarshaller interface alone.

#golang

How to exploit common #XMLRPC vulnerabilities in #Wordpress

https://medium.com/@the.bilal.rizwan/wordpress-xmlrpc-php-common-vulnerabilites-how-to-exploit-them-d8d3c8600b32