Proof-Of-Concept of time-based username enumeration. This happens due to the time it costs to process a hash in the backend server and is often ignored or forgotten in audits.
nodejs mongodb proof-of-concept bug hacking poc vulnerability pentest time-based username-checker username-enumeration time-sensitive
-
Updated
Jan 11, 2023 - JavaScript