added check for valid credentials

2014-11-19 10:50:04 +01:00
parent 0a53c52645
commit bc4f0c002b
1 changed files with 6 additions and 0 deletions
--- a/wpscan.rb
+++ b/wpscan.rb
@@ -95,6 +95,12 @@ def main
      raise 'Basic authentication is required, please provide it with --basic-auth <login:password>'
    end

+    # test for valid credentials
+    unless wpscan_options.basic_auth.nil?
+      res = Browser.get_and_follow_location(wp_target.url)
+      raise 'Invalid credentials supplied' if res && res.code == 401
+    end
+
    # Remote website is wordpress?
    unless wpscan_options.force
      unless wp_target.wordpress?