wstg-idnt-04 - Test for Account Enumeration
Tests authentication-related endpoints for account enumeration through response messages, timing differences, and HTTP status codes.
Tags
Updated: 2026-09-29Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Test login responses
- Test registration responses
- Test password reset responses
- Test user recovery endpoints
- Compare response timing
- Compare HTTP status codes
- Analyze response content
- Guess common usernames
Inputs
- Target URL
- Usernames
- Email addresses
- HTTP request parameters
- Username lists
Outputs
- Response comparisons
- Timing measurements
- HTTP status comparisons
- Enumeration findings
- Username validity indicators
Requirements
- HTTP-accessible target
- curl
- Bash
- bc
- Python 3
- Python requests
- Enumeration tools