Proof-Of-Concept of time-based username enumeration. This happens due to the time it costs to process a hash in the backend server and is often ignored or forgotten in audits.
nodejsmongodbproof-of-conceptbughackingpocvulnerabilitypentesttime-basedusername-checkerusername-enumerationtime-sensitive
-
Updated
Jan 11, 2023 - JavaScript