Attack TechniquesHigh
Brute Force Attack
An attack that tries all possible combinations to guess credentials
Content
What is a Brute Force Attack?
A Brute Force Attack involves guessing login credentials or encryption keys by systematically trying all possible combinations until the correct one is found.
Common Types
- Simple brute force – Tries every combination
- Dictionary attack – Uses known wordlists
- Credential stuffing – Tries known username-password pairs
Best Practices
- Enforce strong password policies
- Use rate limiting and account lockouts
- Deploy multi-factor authentication (MFA)
- Monitor login attempts and failed logins
Quick Facts
Severity Level
8/10
Target
Usernames, passwords, encryption keys
Tools Used
Hydra, John the Ripper, Burp Suite
Defense
MFA, CAPTCHA, lockouts
Example
Trying every PIN from 0000 to 9999
Related Terms