Credentials / Notes / LL

• Scrape the website for potential credentials if all of the generic ones dont work

• Use hydra for bruteforcing for speed and ease

• try using the name of the application twice nexus:nexus