Attack TechniquesHigh

Brute Force Attack

An attack that tries all possible combinations to guess credentials

Content

What is a Brute Force Attack?

A Brute Force Attack involves guessing login credentials or encryption keys by systematically trying all possible combinations until the correct one is found.

Common Types

  • Simple brute force – Tries every combination
  • Dictionary attack – Uses known wordlists
  • Credential stuffing – Tries known username-password pairs

Best Practices

  • Enforce strong password policies
  • Use rate limiting and account lockouts
  • Deploy multi-factor authentication (MFA)
  • Monitor login attempts and failed logins
Quick Facts
Severity Level
8/10
Target

Usernames, passwords, encryption keys

Tools Used

Hydra, John the Ripper, Burp Suite

Defense

MFA, CAPTCHA, lockouts

Example

Trying every PIN from 0000 to 9999