Password spraying (sometimes referred to as reverse brute force) is a technique whereby multiple login attempts are made by using a valid username(s) and a word list containing various possibilities of the password. The objective of performing a password spraying attack is to obtain a set of valid user credentials.
To perform a password spraying attack, we are going to use our existing WordPress server as our target Burp Suite to obtain the username and password input field on a web page, and hydra to perform our password spraying attack to find valid user credentials.
To get started, please use the following instructions:
- Configure your web browser to use the Burp Suite proxy settings. Once you've done that, open Burp Suite and turn on its Intercept mode.
- Next, on your web browser, go to the WordPress login portal. The URL should be...
