Don't skip passwords that start with a hash. This is fairly common (see RockYou list for example).

2013-09-12 09:30:23 -04:00
parent 2c6ec234ac
commit 870201de14
1 changed files with 0 additions and 2 deletions
--- a/lib/common/models/wp_user/brute_forcable.rb
+++ b/lib/common/models/wp_user/brute_forcable.rb
@@ -141,8 +141,6 @@ class WpUser < WpItem
        opt      += ':UTF-8' if charset != 'UTF-8'

        File.open(wordlist, opt).each do |line|
-          next if line[0,1] == '#'
-
          passwords << line.strip
        end
      elsif wordlist.is_a?(Array)