- Found login form
- Got username/password hash.
- Hints are saying that I don’t need to crack the hash.
- Tried basic auth bypass with correct username - no luck.
- Stuck now.
Update wordlists hint from innominate is a good hint 
Is the contact form something I should test more thoroughly?