Collaborate Disseminate
I want to generate a wordlist of usernames that would suit the following cases:
Can be combined from several words depending on the case: “name”, “name + surname”, “name + surname + DOB”.
Username can contain special chara… Continue reading Generate wordlist of usernames for OSINT
I want to find the username first, then pass the username and a password list. I could not find flags to ignore password in Ncrack and other related tools. The device I want to find a username is Linux based. Is there a tool … Continue reading How to brute force only username not password?
I’m not a security guy, so bear with me. As discussed in other topics, usernames in and of themselves are valid forms of verification, and there’s nothing particularly sensitive or secure about usernames. For example, in most… Continue reading Account Recovery: Displaying username without verification
I’m trying to automate the deployment of my blog.
Most CI providers are using virtual machines/Docker containers with Linux, so I’m learning about shell scripts and SSH now, which is all new to me.
What I have
In order… Continue reading Should I treat my SSH username like a secret?
Sometimes we cannot avoid to write down usernames and passwords internally in our organisation. This is mainly for personal usage, not for reading by programs.
There are several ways to do this, e.g.
username/password
use… Continue reading How to write down user credentials?
I have an application that I want to make comply with GDPR.
My strategy for storing personal information is to encrypt it, but I am having a hard time figuring out how to handle usernames.
I have been searching for other q… Continue reading How to store the username in database under GDPR?
I have an application that I want to make comply with GDPR.
My strategy for storing personal information is to encrypt it, but I am having a hard time figuring out how to handle usernames.
I have been searching for other q… Continue reading How to store the username in database under GDPR?
I live in a city where CCTV camera coverage is comprehensive and increasing. Cameras are getting cheaper and higher resolution. Everyone has a video camera in their pocket already, and we are starting to see trends which indi… Continue reading Is password entry being recorded on camera a realistic concern?
This might have been asked before, but I’ve looked for a few hours and can’t find much.
I would also like some opinions on what an attacker might do if he enters an email address on a site and it responds with “That user ID … Continue reading What might an attacker do with email address as login name?
For example, suppose I already typed username and password at this Facebook page:
https://m.facebook.com
But I wrongly clicked ‘Create New Account’ instead of Log In. My question is, does it increase any security risk?