An educational, lab-only Flask security project demonstrating how weak authentication logic can be broken in practice. Includes an intentionally vulnerable local login page and a simulated brute-force attacker script to show credential stuffing, missing rate limits, and plain-text passwords—paired with concrete guidance on hardening real-world app.

A hands-on simulation of attacking a vulnerable login page using Python. This repo includes a Flask-based vulnerable login page and Python scripts to exploit weaknesses in regex validation and brute-force login attempts. Perfect for learning web penetration testing basics and ethical hacking techniques.