This page pretends to be: a generic SaaS login — “Globex Portal” (this is App B, the SECOND app).
The trick: password reuse — typing on App B the SAME password you already used on App A. Reusing one password across apps means a single breach unlocks all of them.
What to do here (App B):
1 First do App A: type a password like Hunter2! and Sign in there.
2 Back here on App B, type the EXACT SAME password Hunter2!.
3 Click Log in.
✅ With VIYUH BDR ON you SHOULD see on App B: a warning BANNER / card (top-right of the page) saying the password was reused — “same credential seen on … and …”. It is an amber/medium warning, NOT a full block page.
👉 Mark PASS if the reuse banner appeared here on App B. Mark FAIL if you typed the same password on both and saw no banner.
localhost, App B on 127.0.0.1). If both pages share the exact same host, BDR treats it as one site and stays silent — that’s correct.
Welcome back. Please enter your details.