Exercise: Identification and Authentication Failures

Automate login tests.
Wirte a small php (or java or python, or what you want) program to be run on your laptop. This program must send a request for login, where you can input a username and a password. You must test if the login is valid or not. You can test with the user house. The password is given in Moodle.

Brute force the login

• Modify your program to test with the list of most often used passwords Passwords. Select the list darkweb2017-top100.txt. You will test user bie1.
• Modify the previous program, such that you can loop all possible passwords with 4 letters.
  Find the password for user taub (this could last for a long time, start the next exercise while waiting for the result).

In Firefox, create a new profile. Download the cookies.sqlite file in the Moodle. Copy this file in the profile directory that has been created for your new profile. Restart Firefox.
Access to www.facebook.com.