bWAPP - Broken Auth - CAPTCHA Bypass (High Security Level)

inspect element....
captcha is in an iframe
captcha.php
Intercept:
- Review responses to input:
submit correct login
notice it returns "Successful login!"
submit incorrect login and correct captcha
submit correct login and incorrect captcha
submit incorrect everything
Intruder:
Clusterbomb
payload 1 : wordlist
payload 2 : wordlist
Grep match: Invalid credentials! Did you forget your password?

[@Tarun_Kotagiri]

🔥

[@Bug-bounty11]

Contact please