Burp Suite User Forum

Create new post

Lab: Username enumeration via account lock

Katherine | Last updated: May 23, 2022 04:25AM UTC

I just have no idea why we are adding a blank payload position at the end of the password instead of using the cluster bomb to find out the username and the password simultaneously.

Liam, PortSwigger Agent | Last updated: May 23, 2022 12:19PM UTC

Hi Katherine. Have you checked out the community solution video?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.