Drupal User Enumration [Ajax]

What is the "Drupal User Enumeration [Ajax]" module?

The "Drupal User Enumeration [Ajax]" module is a test case designed to detect user enumeration vulnerabilities in Drupal websites. Drupal is a popular content management system (CMS) used to build websites and applications. This module has an informative severity level, meaning it provides valuable information but does not pose an immediate threat. The original author of this module is 0w4ys.

Impact

This module helps identify potential user enumeration vulnerabilities in Drupal websites. User enumeration vulnerabilities can allow attackers to gather sensitive information about valid user accounts, such as usernames or email addresses. This information can be used for further attacks, such as brute-forcing passwords or launching targeted phishing campaigns.

How does the module work?

The "Drupal User Enumeration [Ajax]" module works by sending HTTP requests to specific endpoints in Drupal websites and analyzing the responses. It uses the following matching conditions to identify potential user enumeration vulnerabilities:

- The response body contains the strings "\":\"a." or "\":\"A." (case-insensitive). - The response header contains the string "application/json". - The HTTP response status code is 200 (OK).

By checking these conditions, the module can determine if the Drupal website is vulnerable to user enumeration. It does not provide the actual usernames or email addresses, but rather confirms the presence of a vulnerability.

Example HTTP request:

GET /admin/views/ajax/autocomplete/user/a HTTP/1.1
Host: example.com

Note: The above example is a simplified representation of the HTTP request. The actual module may include additional headers or parameters.

It is important to note that this module is designed for security testing purposes and should only be used with proper authorization.