: Send the request (usually a POST request to a login endpoint) with any dummy credentials. If the server is vulnerable to this "backdoor," it will grant access or reveal a "flag". Discovery Process