THC-Hydra provides excellent output for plugging screenshots into your reports.
Unfortunately, if there is a redirect associated with the login, Hydra returns a lot of false positives (or false negatives).
While not as clear, a ZAP screenshot highlighting the Fuzzer value with a differing result size can provide the evidence.
Recent Comments