Authentication Bypass TryHackMe Write-Up

Username Enumeration

Creating accounts with different usernames. While creating those accounts existing usernames is not allowed to be taken by new users while signing up. Which leads to the discovery of different usernames which will enable the possibility of creating a wordlist to brute force various passwords.

While creating an account with the username admin

Using ffuf to enumerate usernames —

user@tryhackme$ ffuf -w /usr/share/wordlists/SecLists/Usernames/Names/names.txt -X POST -d "username=FUZZ&email=x&password=x&cpassword=x" -H "Content-Type: application/x-www-form-urlencoded" -u <http://10.10.84.98/customers/signup> -mr "username already exists"

Tags Explained …

bug bounty ctf cybersecurity tryhackme tryhackme-walkthrough