Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #10

Python script detects timing attacks on login endpoints

Original: 228 lines of Python that measures login response times and flags statistical differences with scipy. Advanced, for secur

Developer Hugo Valters has published a 228-line Python tool that measures login endpoint response times and uses scipy to flag statistically significant differences, a technique for spotting timing-based username enumeration vulnerabilities. Aimed at security testers auditing their own applications, the release is drawing attention in infosec and Python developer circles.

Why now: Timing attacks on authentication endpoints are a timely topic among security practitioners, and a ready-made open tool for testing them is useful.

Hugo ValtersPythonscipyvaltersit.com

Open on mastodon →

Evidence

• 228 lines of Python that measures login response times and flags statistical differences with scipy. Advanced, for security testing of your own apps. https://www. valtersit.com/python/timing-at tack-detector-for-login-endpoints/ # security # python # infosec · hugovalters · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/1784804