Security with Go

Brute forcing the HTML login form

Just about every website with a user system provides a login form on a web page. We can write a program that will submit the login form repeatedly. This example assumes that there is no CAPTCHA, rate limit, or other deterring mechanisms on the web application. Remember not to perform this attack against any production site or any site you do not own or have permission. If you want to test it, I recommend that you set up a local web server and test only locally.

Every web form can be created with different names for the username and password fields, so the names of those fields will need to be provided on each run and must be specific to the URL being targeted.

View the source or inspect the target form to ...