1. Hello team, while i was testing on https://book.dansmonorage.blue/login i noticed that there is no ratelimit protection on POST login form, so an attacker can takeover the account by brute forcing the password field

Steps to reproduce:

1. go to https://book.dansmonorage.blue/login
2. Enter username and any password
3. Capture the request with burpsuite and start bruteforcing with our wordlist

POC Screenshot:

Patch recommendation:

1. Add ratelimit protecion on POST login endpoints/parameters