Login Attempt Simulator (Safe & Local)

Simulate login attempts locally (no network calls). Use to evaluate defenses: lockouts, rate-limits, CAPTCHA triggers, progressive delays.

Simulation target name Usernames (comma separated) Password list (one per line) Simulation rules

Attempts per second Max attempts before lockout Lockout duration (seconds) Trigger CAPTCHA after attempts Probability of correct password (per username)

I confirm this is for authorized, lawful testing and all network requests will be local/mocked.

Important: This simulator performs **no network operations**. It's a local model of common defenses (rate limits, lockouts, CAPTCHA). Do not use it to attack live systems.

Target: MockApp (local)

Running: No

Attempts: 0

Successes: 0

Failures: 0

Lockouts: 0

Event Log

Suggested Defenses

Rate limit authentication endpoints.
Progressive delays & exponential backoff per IP/account.
Temporary lockouts after threshold (with increasing duration).
Require CAPTCHA or 2FA after suspicious attempts.
Monitor & alert on anomalous auth patterns.