A technique used on systems that leak information on whether a given user exists or not, to get a list of registered users.
Questions tagged [user-enumeration]
44 questions
26
votes
4 answers
Preventing User Enumeration on Registration Page
You have a website that users log into, and you want to prevent user enumeration.
On the login page and the forgotten password page, this can be achieved by careful choice of user messages, but what about the new user registration page? You want to…
James_pic
- 2,580
- 2
- 20
- 22
2
votes
1 answer
memcached enumeration issues
I have a reverse shell from an application called openEMR to my kali host. Im trying to enumerate memcached manually however I get an error failed to listen on TCP port 11211: Address already in use
any help would be appreciated. Ive tried to use…
David
- 95
- 1
- 9