Password brute-force via password change
A brute force attack is a cracking method that uses trial and error to compromise login information, encryption keys, and passwords. It is a simple yet effective method for gaining unauthorized access to user accounts, business systems, or networks. Until they discover the proper login details, a malicious user attempts a wide variety of usernames and password combinations to obtain the right authentication credentials.
In this recipe, we will attack a vulnerable password change function within the application using brute-force attacks.
Getting ready
This lab requires a PortSwigger Academy account and ZAP to intercept requests and responses from the server to your browser.
How to do it...
In this recipe, we will demonstrate a brute-force attack by completing the PortSwigger Academy Password brute-force via password change lab to find the correct credentials. To start the lab, follow these instructions:
- Navigate to the...
