Some small refactoring and fix for issue #66

lib/wpscan/modules/brute_force.rb

@@ -41,7 +41,7 @@ module BruteForce
         queue_count   += 1
 
         # create local vars for on_complete call back, Issue 51.
-        username = login.name
+        username = login.name != 'empty' ? login.name : login.nickname # Issue #66 
         password = password
 
         # the request object

wpscan.rb

@@ -376,19 +376,17 @@ begin
       puts "The plugin #{protection_plugin.name} has been detected. It might record the IP and timestamp of every failed login. Not a good idea for brute forcing !"
       puts "[?] Do you want to start the brute force anyway ? [y/n]"
 
-      if Readline.readline !~ /^y/i
+      bruteforce = false if Readline.readline !~ /^y/i
-        bruteforce = false
-      end
     end
 
-    if bruteforce === false
+    if bruteforce
-      puts
-      puts "Brute forcing aborted"
-    else
       puts
       puts green("[+]") + " Starting the password brute forcer"
       puts
       wp_target.brute_force(usernames, wpscan_options.wordlist)  
+    else
+      puts
+      puts "Brute forcing aborted"
     end
   end