BSides Vancouver 2026

User enumeration remains one of the most prevalent yet under-discussed application security vulnerabilities across industries and organizations worldwide. Despite its critical role in the security landscape, many security teams overlook the implications of this core security flaw.

This talk will demystify user enumeration by exploring its various types, attack methods, and real-world impact on applications. Attendees will gain practical insights into identifying and mitigating these vulnerabilities with hands-on demonstrations of scripts, tools, and advanced techniques designed for faster detection by utilizing LLM technology. Whether a penetration tester, developer, or security professional, this session will equip you with actionable strategies to strengthen your defenses against user enumeration threats.