Skip to content

Commit 8fe3f28

Browse files
committed
Merge branch 'drupal_views_user_enum.rb' of git://github.com/zeknox/metasploit-framework into zeknox-drupal_views_user_enum.rb
2 parents 8e7a748 + c4f35de commit 8fe3f28

File tree

1 file changed

+11
-6
lines changed

1 file changed

+11
-6
lines changed

modules/auxiliary/scanner/http/drupal_views_user_enum.rb

Lines changed: 11 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,8 @@ module of Drupal, brute-forcing the first 10 usernames from 'a' to 'z'
2424
'Author' =>
2525
[
2626
'Justin Klein Keane', #Original Discovery
27-
'Robin Francois <rof[at]navixia.com>'
27+
'Robin Francois <rof[at]navixia.com>',
28+
'Brandon McCann "zeknox" <bmccann [at] accuvant.com>'
2829
],
2930
'License' => MSF_LICENSE,
3031
'References' =>
@@ -106,11 +107,15 @@ def run_host(ip)
106107
print_status("Done. " + final_results.length.to_s + " usernames found...")
107108

108109
final_results.each do |user|
109-
report_auth_info(
110-
:host => Rex::Socket.getaddress(datastore['RHOST']),
111-
:port => datastore['RPORT'],
112-
:user => user,
113-
:type => "drupal_user"
110+
print_good("Found User: #{user}")
111+
112+
store_loot(
113+
type,
114+
'text/plain',
115+
Rex::Socket.getaddress(datastore['RHOST']),
116+
user,
117+
'drupal_user.txt',
118+
user
114119
)
115120
end
116121
end

0 commit comments

Comments
 (0)