Adding Captcha on the login page might slow down automated brute force and dictionary attacks. However, captcha is not enough to prevent such attacks, various programing libraries are available to process the captcha and automate the attack.

In this lab exercise, we will take a look at how to automate an attack on login page with math captcha. 

Objective: Find the password of "admin" user and retrieve the flag. 

Instructions: 

• This lab is dedicated to you! No other users are on this network :)
• Once you start the lab, you will have access to a root terminal of a Kali instance
• Your Kali has an interface with IP address 192.X.Y.2. Run "ip addr" to know the values of X and Y.
• The target server should be located at the IP address 192.X.Y.3.
• Do not attack the gateway located at IP address 192.X.Y.1
• The password contains the characters "4aMx]" and the length is 5.

The solution for this lab can be found in the following manual: https://assets.ine.com/labs/ad-manuals/walkthrough-2172.pdf