Fix #96 Username detection from header location when a trailing slash is present

2013-01-01 15:30:01 +01:00
parent 9b14a8d038
commit a4ace91e68
2 changed files with 9 additions and 7 deletions
--- a/lib/wpscan/modules/wp_usernames.rb
+++ b/lib/wpscan/modules/wp_usernames.rb
@@ -37,7 +37,7 @@ module WpUsernames
      username = nil
      nickname = nil
      if response.code == 301 # username in location?
-        username = response.headers_hash['location'][%r{/author/([^/]+)/}i, 1]
+        username = response.headers_hash['location'][%r{/author/([^/\b]+)/?}i, 1]
        # Get the real name from the redirect site
        nickname = get_nickname_from_url(url)
      elsif response.code == 200 # username in body?