Authentication - Lab : Username enumeration via different responses
Authentication - Lab : Username enumeration via subtly different responses
Authentication - Lab : Username enumeration via response timing
Authentication - Lab : Broken brute-force protection, IP block
Authentication - Lab : Username enumeration via account lock
Authentication - Lab : 2FA simple bypass