nuclei-templates/http/vulnerabilities/wordpress/wordpress-user-enum.yaml

34 lines
726 B
YAML

id: wordpress-user-enum
info:
name: Wordpress User Enumeration
author: r3dg33k
severity: info
metadata:
max-request: 1
tags: wordpress
http:
- method: GET
path:
- "{{BaseURL}}/?author=1"
matchers-condition: and
matchers:
- type: regex
regex:
- '(?i)Location: http(s|):\/\/[\w\.\-]+\/author\/\w+'
part: header
- type: status
status:
- 301
extractors:
- type: regex
part: header
regex:
- 'author\/\w+'
# digest: 4a0a00473045022100a9bd51a7335e4a3132dc7adf1b5faad143902b92a257ce67c7554206bb1208e60220524362849327f5644ce5e078f58218d5ed17ceaa3b90982ac8eb73b44b8348d5:922c64590222798bb761d5b6d8e72950