SEARCH RESULTS


Open Web Application Security Project (OWASP) – Testing for Account Enumeration and Guessable User Account     3.5.2 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication

https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/03-Identity_Management_Testing/04-Testing_for_Account_Enumeration_and_Guessable_User_Account

The scope of this test is to verify if it is possible to collect a set of valid usernames by interacting with the authentication mechanism of the application.