Brute Force
Brute force as a technique involves the systematic testing of a large number of credential combinations to gain unauthorized access. It includes classic exhaustive testing, dictionary attacks with common passwords, and password spraying.
Term
description · examples · notesBrute force as a technique involves the systematic testing of a large number of credential combinations to gain unauthorized access. It includes classic exhaustive testing, dictionary attacks with common passwords, and password spraying.
Description
The technique is used for cracking user account passwords, decrypting protected files, and breaking encrypted communications. Effectiveness depends on the attacker's computational resources and target complexity.
Examples
- Automated testing of millions of passwords against a login page
- Spraying a single common password against all accounts in an organization
- Offline cracking of hashed passwords after a database leak
Notes
- Login attempt rate limiting and multi-factor authentication are the most effective countermeasures.
Threats
used by 4Threats that use it. Select one to open its page.
Defenses
countered by 6How it is countered. Select one to open its page.