AUTH / 01 Beginner

Username Enumeration

Investigate a login flow that reveals whether an account exists through different error messages.

◎ OBJECTIVE

Discover a valid account and log in successfully to the target application.

⌘ YOUR TASK

Testing wordlists

USERNAMES.TXT

carlos
wiener
administrator
support
guest

PASSWORDS.TXT

password
letmein
qwerty
sunshine1
trustno1

Need a hint?

A secure login normally returns the same message whether the username or password is wrong.

Try every username with not-the-password, then watch for a response that changes.

https://acme-portal.test/login

Secure

Attempt logResponses captured from this session

0 requests

TIMEUSERNAMERESULT

No requests yet. Submit the login form to begin testing.

Sign in to your account