rapid7/metasploit-framework — pull request #1208 by zgrace (2012-12-24 22:31:13+00:00)
Title: Added user name enumeration based on author id enumeration

I added a method to enumerate user names based on the author id enumeration, i.e. index.php?author=1. The method then pulls the user name from rss feed, generates a temporary file with enumerated users, then sets the USER_FILE datastore variable to the temporary file location. The module then works as it did before by validating user names, then attempting to brute force if that options is selected.

Not sure who was first to come up with this user name enumeration technique and I'm not trying to take credit for it, just adding the functionality to this module.