Exploit a Login Form

Chaining Recon Into an Attack

In the previous lessons you learned to map a site and find hidden pages. Now you will use that knowledge offensively.

Your Mission

1. Run dirb against http://15.204.80.238/ to find the login endpoint
2. Try common default credentials (admin/admin, admin/password, root/root)
3. Once inside, find the flag on the page

Tools You Need

• dirb or gobuster for discovery
• curl with --data flag for POST requests, or just your browser

Example Login Attempt

curl -X POST http://TARGET/login -d 'username=admin&password=admin'

Note

This is a simulated exercise. In real engagements you always have written authorization before attempting any login.