Broken Authentication - Username Enumeration via Different Responses
Support This Channel
======================
Please like and subscribe, it means a lot!
Please buy me a coffee so I can continue to make content.
https://buymeacoffee.com/zenshell
My cybersec and webdev training site
https://www.zenshell.ninja
Join our Discord
/ discord
In this lab we see a simple example of brute forcing a login box.
Although we could try every username against every password, this would take a long time. Since this app is also vulnerable to username enumeration, we are able to first ascertain a valid username which heavily reduces the time required for a brute force attack.