DVWA
Medium difficulty
Enter something random, prompt for incorrect username and password
Open BrupSuite
Enter something random, click submit
Send it to Intruder
Add name and password with &
then click payload
Prepare dictionaries for two attack points respectively
Compare the lengths and find the successful brute force
admin, password
Take it and try it
Successful brute force