Used 7kbscan-WebPathBrute and corresponding dir dictionary for path scanning.
http://127.0.0.1/xxxxxxxxxx/login
Try with weak password, admin + admin. Shows Invalid username error.
This can help to brute force admin username.
Catch the request and send to Intruder.
With the help of this username wordlist, finally get the admin username.
With pretty much same method as above, here I get the password.
So succefully log in.
username=verla
password=jester
