Cristhian Amaya

I'm a Colombian software developer working as a team lead and head of cloud services at Novicell Spain in Barcelona. I'm also a security enthusiast so I spend time reading and discussing security related books, attending cons or meetups, and breaking stuff on my home lab. When I'm not doing tech related stuff I can be found playing board games, boxing, running, playing basketball or just enjoying Barcelona's weather.

User Enumeration Vulnerability in Umbraco

Issue No 36 • 03 April 2018

Umbraco is a well-protected CMS, but security is a never-ending battle in any web application. Cristhian shows us how Umbraco is vulnerable to timing attacks for user enumeration, what risks it might pose, and how well-protected Umbraco is against those risks.