weak Password Policy Directory Protection

Hello,

The strong Password Policy is everywhere in place.

BUT

The Directory Protection Part allows to bypass this strong Password Policy and setting a Password like

1. This is very easy to bruteforce.

Lets see :)

Password is set to 1 and it will get accepted.

As you can see the Password got accepted.

Lets try it on another Place where the strong Password Policy is in Place

FTP is setting a strong password policy and not allowing the password 1

Thank you for watching :)

Best regards
Ahmed Hassan