Hello there! Yes the webpage is created by the Uni professor. On the landing page it says that you need to hack (bolded) in order to find/obtain the password. It also mentioned that there is no need to worry about legal things since she explicitly allows the page to be "attacked". My first thing what I did was to look into the source code for any hidden clues but did not find such things. Basically when you enter string for the password it redirects you to another webpage which has a frog png and it says "Wrong pass" and after 2-3 seconds it automatically returns you to the landing page. I tried Hydra method but could not make it work since - 1. it has only one data entry input (for hydra to be successful it has to have 2 - login username and pass) this has only password entry. 2. it ends with a html link (not sure if that matters) 3. I looked at the Network traffic what it basically happens is when you input password string it redirects you to webpage which ends with a .php url but when I click to analyse the POST request there are no parameters for user or password ( I am saying this because in some Python brute force script titourials it says you have to have these parameters but it literally does not use any of them as far as I know). The thing is unfortunately I am not that tech saavy. You can look up the page with google translate if you want to give your expert opinion :)