Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Login to post

Username enumeration via account lock lab issue

Alexandr | Last updated: Sep 21, 2023 06:37AM UTC

Hello, I'm trying to solve the lab Username enumeration via account lock, but I can't solve it. I've tried to solve it according to the video from community solutions, but my burp aren't showing the expected errors. I'm using Burp Suite Community Edition -> version 2023.10.1.1 Could you please support me to find a solution for this problem?

Ben, PortSwigger Agent | Last updated: Sep 21, 2023 10:46AM UTC

Hi Alexandr, If you are using Burp Community, you may need to split your attack up into smaller subsets in order to circumvent the throttling that is in place in the Intruder tool in Burp Community i.e. rather than carrying out one large attack containing all of the usernames you would need to carry out several smaller attacks containing a handful of usernames in each attack.

You need to Log in to post a reply. Or register here, for free.