View Single Post
Old 02-27-2005, 09:11 PM   #6 (permalink)
skaven
Insane
 
Location: Austin, TX
given enough time, it wouldn't take long to build up a database, using PHP or Perl and a MySQL database, of the valid pages. Assume that you use something like the HTTP-Lite Perl module, and that each GET takes ~1 sec to verify. Then assuming 8-character user IDs, which can only contain alphanumeric characters, you've got 36^8 = 2821109907456 possibilities, which boils down to ... 89,702 years of compute time. Whew! Man I probably should have computed this last part before starting this post ;-)

Yeah...you'd probably be better off simply trying to get shell access on the web server (this is fairly commonplace at my university) -- then you just cd to /home and do an ls -- instant list of users.
skaven is offline  
 

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76