Broken Authentication Brute Forcing Passwords help please

Are we supposed to use the rate_checker.py to brute force the password because I’ve tried and couldn’t find it. I got the password policy I think, but can’t find the password for htbuser.

Does anyone know why is the script adding %0A to the end of the passwords and how do I fix it?

image