Skip to content

Commit e1666ea

Browse files
Update users_enumuration.md
1 parent 47e44b9 commit e1666ea

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

intro_hacking/5-api/walkthrough/users_enumuration.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
### User Enumuration
1+
## User Enumuration
22
User enumeration is a security testing technique used to discover valid usernames or user IDs within an application or system. It's done by observing slight but discernible differences in the system's responses when an attacker attempts to authenticate or interact with different user accounts.
33

44
## How User Enumeration Works
@@ -25,3 +25,4 @@ The primary mitigation strategy is to ensure **consistent and generic error mess
2525
* **Consistent Timing:** Implement **constant-time algorithms** for all password verification steps to prevent timing-based attacks.
2626
* **Rate Limiting:** Aggressively limit the rate of login attempts from a single IP address to make large-scale dictionary testing impractical.
2727

28+

0 commit comments

Comments
 (0)