From 8145a4a3a6600d1f9d9029cdd7edbf005302ecfa Mon Sep 17 00:00:00 2001 From: erwanlr Date: Sun, 7 Apr 2019 17:06:19 +0100 Subject: [PATCH] Fixes #1330 --- app/finders/users/author_id_brute_forcing.rb | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/app/finders/users/author_id_brute_forcing.rb b/app/finders/users/author_id_brute_forcing.rb index 725a7190..45741ae3 100644 --- a/app/finders/users/author_id_brute_forcing.rb +++ b/app/finders/users/author_id_brute_forcing.rb @@ -7,6 +7,11 @@ module WPScan class AuthorIdBruteForcing < CMSScanner::Finders::Finder include CMSScanner::Finders::Finder::Enumerator + # @return [ Array ] + def valid_response_codes + @valid_response_codes ||= [200, 301, 302] + end + # @param [ Hash ] opts # @option opts [ Range ] :range Mandatory # @@ -15,7 +20,7 @@ module WPScan found = [] found_by_msg = 'Author Id Brute Forcing - %s (Aggressive Detection)' - enumerate(target_urls(opts), opts) do |res, id| + enumerate(target_urls(opts), opts.merge(check_full_response: true)) do |res, id| username, found_by, confidence = potential_username(res) next unless username @@ -49,7 +54,7 @@ module WPScan super(opts.merge(title: ' Brute Forcing Author IDs -')) end - def request_params + def full_request_params { followlocation: true } end