id: drupal-user-enum-ajax info: name: Drupal User Enumration [Ajax] author: 0w4ys severity: info tags: drupal requests: - method: GET path: - "{{BaseURL}}/admin/views/ajax/autocomplete/user/a" - "{{BaseURL}}/views/ajax/autocomplete/user/a" - "{{BaseURL}}/?q=admin/views/ajax/autocomplete/user/a" - "{{BaseURL}}/?q=views/ajax/autocomplete/user/a" headers: User-Agent: "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0" matchers-condition: and matchers: - type: word words: - '":"a.' - '":"A.' part: body - type: word words: - "application/json" part: header - type: status status: - 200 extractors: - type: regex part: body regex: - '"[\w \-\_\@\.]+\"'