How can I perform a brute force attack on a webmail site which has no firewall and has an unlimited amount of tries?

My professor made this site for us and gave us a project to find the password if we have the email. Is it possible? Not sure if this is relevant, but the site isn’t HTTPS also