Public release

Author: p0dalirius

README.md

@@ -12,11 +12,15 @@
 
 **Requirement**: A valid username on the application (no need for password)
 
- - [x] Analysis of the response time differences between a valid and invalid username with [TimeBasedLoginAnalysis.py](./TimeBasedLoginAnalysis.py).
- - [x] Plot analysis results to a graph (option `-S` of ) or export to file (option `-f <graph.png>`) with [TimeBasedLoginAnalysis.py](./TimeBasedLoginAnalysis.py).
- - [x] Multithreaded login tries.
- - [x] Extract only usernames returning responses times that stands out.
-
+ - [TimeBasedLoginAnalysis.py](./TimeBasedLoginAnalysis.py)
+   + [x] Analysis of the response time differences between a valid and invalid username.
+   + [x] Plot analysis results to a graph (option `-S` of ) or export to file (option `-f <graph.png>`).
+   + [x] Multithreaded login tries.
+ 
+ - [TimeBasedLoginUserEnum.py](./TimeBasedLoginUserEnum.py)
+   + [x] Extract only usernames returning responses times that stands out.
+   + [x] Multithreaded login tries.
+   
 ## Usage
 
 ```

TimeBasedLoginAnalysis.py

@@ -28,6 +28,8 @@ def trylogin(username, statistics):
 
 
 def parseArgs():
+    print("TimeBasedLoginAnalysis v1.1 - by @podalirius_\n")
+
     parser = argparse.ArgumentParser(description="Enumerate valid usernames based on the requests response times.")
     parser.add_argument("-u", "--username", default=None, required=True, help='Username')
     parser.add_argument("-t", "--threads", dest="threads", action="store", type=int, default=4, required=False, help="Number of threads (default: 4)")

TimeBasedLoginUserEnum.py

@@ -44,6 +44,8 @@ def average_response_time(username, threads=4, samples=100):
 
 
 def parseArgs():
+    print("TimeBasedLoginUserEnum v1.1 - by @podalirius_\n")
+
     parser = argparse.ArgumentParser(description="Enumerate valid usernames based on the requests response times.")
     parser.add_argument("-u", "--username", default=None, required=True, help='Username')
     parser.add_argument("-f", "--usernames-file", default=None, required=True, help='File containing list of usernames to test.')