IMPORTANT ADVISE!!!! This is script is only created as educational proposals, don't use without the consent of the objective you are pointing to

Check this link about how easy is to disable xml-rpc https://blogvault.net/wordpress-disable-xmlrpc/ Tools like wpscan bruteforce will not work againts sites wich deactivated the xml-rpc feature

Use a password.lst file in same dir as script, it should be created with crunch or some other wordlist generators.