🔐 07 — Authentication Bypass
0/3 solved
🔎 Medium — User Enumeration
The login shows different error messages: "User not found" vs "Wrong password". Enumerate valid users, then brute-force their passwords.
Try usernames:
admin, alice, test. "Wrong password" means the user exists. Then use a wordlist (like rockyou.txt) or Hydra to brute-force. The seeded users are: admin, alice, bob, charlie, dave, eve with passwords matching hints from the home page.