https://github.com/wh1t3h47/timenumeration

Proof-Of-Concept of time-based username enumeration. This happens due to the time it costs to process a hash in the backend server and is often ignored or forgotten in audits.

bug hacking mongodb nodejs pentest poc proof-of-concept time-based time-sensitive username-checker username-enumeration vulnerability

Last synced: 09 Apr 2026