No credit card required
Using OWASP Mutillidae II, let's determine whether the application allows HPP attacks.