Fixes #456 - stop-user-enumeration detection & script for bypass

2014-04-16 15:09:41 +02:00
parent f77a27ecc3
commit 45f5f50262
2 changed files with 78 additions and 0 deletions
--- a/wpscan.rb
+++ b/wpscan.rb
@@ -296,6 +296,11 @@ def main
      puts
      puts "#{green('[+]')} Enumerating usernames ..."

+      if wp_target.has_plugin?('stop-user-enumeration')
+        puts "#{red('[!]')} Stop User Enumeration plugin detected, results might be empty. " \
+             "However a bypass exists, see stop_user_enumeration_bypass.rb in #{File.expand_path(File.dirname(__FILE__))}"
+      end
+
      wp_users = WpUsers.aggressive_detection(wp_target,
        enum_options.merge(
          range: wpscan_options.enumerate_usernames_range,