Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with user-enumeration
Search options answers only
not deleted
user 95381
A technique used on systems that leak information on whether a given user exists or not, to get a list of registered users.
4
votes
Accepted
Should I be concerned about the WordPress REST API's user enumeration vulnerability?
It's difficult to reliably prevent the enumeration of Wordpress users as there are multiple different ways they can be leaked. Besides the REST API approach, an attacker can also loop through author …
- 45.1k
14
votes
Is it unsafe to show message that username/account does not exist at login?
You just can't prevent it. (Unless you're ready to sacrifice a significant amount of usability.)
User enumeration can be undesirable and there are indeed potential security implications (e.g. if an a …
- 45.1k