danielbarry / widomakr

WidoMakr is web discovery tool written in Java, a collection of tools for quickly determining what information can be discovered and where potential exploits may exist.

0 stars 0 forks source link

Directory Return Time Testing (a.k.a Are We There Yet?) #5

Open danielbarry opened 7 years ago

danielbarry commented 7 years ago

Acceptance Criteria

[ ] Test how long statistically each letter takes to return for a given request - hopefully indicating whether there are files or folders for a given letter.
[ ] Map the results for each given layer.

danielbarry commented 7 years ago

Proof of concept: https://www.brendanlong.com/timing-attacks-and-usernames.html

Discussion: https://news.ycombinator.com/item?id=14956876