New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

User enumeration attack in the login page #15

Open

mr-ma opened this issue May 1, 2018 · 0 comments

Owner

mr-ma commented May 1, 2018

The login page may not indicate whether a username exist or not.
We need a lock down (tarpit) mechanism as well.

# for free to join this conversation on GitHub. Already have an account? # to comment