I can't remember my password for a locally installed app but I wrote it down poorly and am sure of 6 letters/numbers out of 11.

I generated a list of all the possibilities given that the badly written letters could only be 2 or 3 possibilities per character.

It gave me a list of 216 combinations that I would like to run through the app on my mac.

I browsed and all I could find are some shady software that would do dictionary attacks... Is it possible to do a "targeted" brute-force attack using only tools available in the OS?

  • 1
    What exactly are you trying to do? Do you have a password hash or a prompt you have to enter the password into? What do you mean by "without 3rd party software"? – AndrolGenhald Jun 13 '18 at 18:20
  • @AndrolGenhald 1) I have a prompt for the password 2) by 3rd party I mean by maybe using Terminal or some other tool available within the operating system. – J.Smith Jun 13 '18 at 18:57
  • Is Python installed on the machine? – Nomad Jun 13 '18 at 19:29
  • @Nomad It is not, but if executing what is mentioned above is impossible without installing anything, I can download Python. – J.Smith Jun 13 '18 at 19:42

There's 2 quick options I can come up with from the top of my head, which are /usr/bin/expect (if this is available on mac), or Python's Pexpect library.

I don't know how expect does file IO, but for Python/Pexpect this obviously isn't a problem and you should be able to do what you're trying in 10-15 lines of code.

  • Alright, I guess I have to deepen my coding abilities! Thank you! – J.Smith Jun 15 '18 at 23:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.