Web Security Lab — Broken Brute-Force Protection, IP Block | PortSwigger Practitioner

My first attempt looked right on paper. I built a script, fed it to Intruder, hit start — and got the exact same “too many incorrect login…