---
id: 8178
title: "Username Discovery"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/web-application-pentesting/username-discovery/"
published_at: "2017-01-30T00:00:00Z"
tags: ["reconnaissance", "authentication", "password-reset", "web-pentesting", "username-enumeration", "account-lockout"]
phying_url: "https://phying.com/item/8178"
lang: en
---

# Username Discovery

## Summary

Part of a login portal security series, covering how login submissions, account registration, and password reset flows can leak valid usernames through overly helpful server responses.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2017-01-30T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/web-application-pentesting/username-discovery/
- **Phying News:** https://phying.com/item/8178
