Ctfhub web password weak password

Open title is a login page ：

  By default, his user name is admin

What we need to blow up is his password , Another question is weak password , We can grab the bag and then use some weak password dictionaries to explode .

1. Grab and intercept ：

 2. Right click , choice send intruder:

Enter into intruder after , First click clear, Then select the one we just filled in password field value , Click on add. such , It was determined that the blasting point was password Is the position .

Then import the dictionary you downloaded from the Internet into Simple list in , Finally, click Strat attack

And then look at Length The change of ：

  Right click ,send reputer View the response ：

You can find it flag 了 .

Reference article ：

1. Weak password --CtfHub Learning journey -web Pre skills - Password ： Weak password --CtfHub Learning journey -web Pre skills - Password - Bili, Bili

2. Use burp To crack violently ：https://blog.csdn.net/ChuMeng1999/article/details/122555284