I scripted a brute force attack to determine the password of the admin account running on the Damn Vulnerable Web App (DVWA) on Low Security using Selenium. Here's the GitHub repo if you'd like to check the code out: https://github.com/vastevenson/dvwa-b...
Note: this is for educational purposes only - to help end users understand why they need strong passwords, and for developers to write more secure apps that make these kinds of attacks less effective.