Skip to content

Instantly share code, notes, and snippets.

@Addvilz

Addvilz/gist:aebef1637cf8d3da8b70

Created July 22, 2015 11:15
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Addvilz/aebef1637cf8d3da8b70 to your computer and use it in GitHub Desktop.
Save Addvilz/aebef1637cf8d3da8b70 to your computer and use it in GitHub Desktop.
Download ZIP
Exploiting auth system without feedback to determine username presence
Raw
gistfile1.txt
var inputUsername
var inputPassword
user = retrieve from storage with matching inputUsername
if user not exists
return 'No matching user'
if user.password not match hash(inputPassword)
return 'No matching user'
How is this exploitable (rude example):
existing user: 2 sec (db read 0.5 sec + hash algo 1.5 sec)
nonexisting user: 0.5 sec (db read 0.5 sec)
if response takes 0.5 sec
user does not exist
if response takes 2 sec
user does exist, try guess password
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment