PortSwigger-Lab-Wordlist Lab: Broken brute-force protection - IP block Wordlist Pass and Users wordlist ready for use in PortSwigger Lab. Proxy > Intruder > Pitchfork > Put Paylods > Start Attack and Grep for 302 code response.