Implement a brute-force scanner for Broken Authentication vulnerability

[Moontary]

Core principles to follow:

• Combinations of passwords that fit the password rule (minimum length of 8, has to include uppercase and number, etc)
• POST request app to the login endpoint, and check whether the status response (success or error)
• Tracking system so that brute-forcing could be stopped and continued later on(in case of using txt plain file)

To Do:

• [x] Make core brute force logic.
• [x] Generate dictionaries based on general password requirements
• [x] Make local tests using the "buggy app"
• [x] Response should be written in response.txt

Use for local testing:

• BrokenDocker
• DVWapp

All prepared following this tutorial