Our first password BruteForcer

In this section, we're going to look at what basic authentication is, how it works, and then we're going to create our first password BruteForcer for this method. Finally, we're going to test the script against our victim web application.

Basic authentication

Basic authentication is one of the simplest techniques for enforcing access control to web application resources. It is implemented by adding special HTTP headers which is insecure by design, as the credentials are being sent encoded with the Base64 method. Encoded means that it can be reversed easily. For example, we can see what a basic authentication header looks like:

The encoded string can be decoded and we found that...