- Bases File: Path to credentials list (required)
- Proxies File: Path to proxy list (optional)
- Only WordPress URLs: Process only URLs with wp-login/wp-admin (default: false)
- Threads: Number of concurrent workers (default: 10)
- Timeout: Request timeout in seconds (default: 20)
- Retries: Login retry attempts (default: 1)
- Max Subdomains to Try: Limit subdomain attempts (default: 10)
- Max Usernames to Try: Limit username attempts (default: 10)
- Subdomain Enumeration: Enable subdomain discovery (default: false)
- Fetch Usernames: Fetch usernames if login fails (default: false)
- Continue After Success: Continue after finding valid login (default: false)
- Proxy File: One proxy per line
- Proxy Format: See Working with Proxies
- Rotation: Random selection
- Retry on Failure: Switch proxy on error
- good.txt:
url:username:password
- bad.txt:
url:username:password (failed logins)
- errors.txt:
url:username:password (connection errors)
- errors_details.txt:
url:username:password:{base64_error}
- info.txt:
url:username:password:role[:payments][:sales_stats]
- woocommerce.txt: Detailed WooCommerce data with role, version, payments, and stats