Insecure login

Click "log in" and modify request with Burp, you can see username and password:

Submit this value and solve challenge.