Weak Passwords - Brute Force Attack

This login system has several security flaws:

• Users have chosen weak, common passwords
• There's no rate limiting on login attempts
• Error messages reveal whether usernames exist
• There's no account lockout after failed attempts

Your goal is to use a dictionary attack to discover the admin's password and access their secret data.

Learning Objective: Understand why strong password policies and brute-force protection are essential for secure authentication.