Our first password BruteForcer

In this section, we're going to look at what basic authentication is, how it works, and then we're going to create our first password BruteForcer for this method. Finally, we're going to test the script against our victim web application.

Basic authentication

Basic authentication is one of the simplest techniques for enforcing access control to web application resources. It is implemented by adding special HTTP headers which is insecure by design, as the credentials are being sent encoded with the Base64 method. Encoded means that it can be reversed easily. For example, we can see what a basic authentication header looks like:

The encoded string can be decoded and we found that the password being sent is equal to admin123.

Usually, when you see a string that ends in equals, it could be a base64 encoding string.

Creating the password cracker

Let's create our password cracker:

1. Let's go back to the Atom editor and open the back2basics.py file. In Section-5, we can see...