would anyone please take a look at the image of my burp suite result. I am learning how to brute force password guessing attack for penetration testing subject. Assuming test and test is the correct username and password, but as attacker they do not know it. So, when attempting brute force, it should display 302 status code instead of 200. I understand that 200 would means "username and password does not match". And 302 would means it matches, so how is it that my result shows all in contrast?
I should be expecting to get 302 for the request i have labeled in red, right? While the other requests should all be 200?
