1. Web Security Academy
  2. Authentication
  3. Password-based
  4. Lab

Lab: Username enumeration via response timing


This lab is vulnerable to username enumeration using its response times. To solve the lab, enumerate a valid username, brute-force this user's password, then access their "My account" page.

Tip: To add to the challenge, the lab also implements a form of IP-based brute-force protection. However, this can be easily bypassed by manipulating HTTP request headers.