Pkav simple blasting

1、 The backstage login Office of the online dream weaving website

2、burp Catch the login package

3、 Put the caught bag in pkav in

4、 Check password add flag , Then casually add some passwords , And the correct password admin

5、 Find the verification code in the request package , And add verification code mark . Find the location of the verification code in the login interface , And try to access .（ I think others copy it directly url after , But I dede No under folder include Folder , So I went up another level ）

6、 Add verification code identification

7、 The employer starts to contract

8、 Check the return package , Find the correct password （ Sometimes they all return errors , Try sending it again , After all, sometimes there may be an error in identifying the verification code ）