9

What pc resources are used when bruteforcing ? I mean bruteforcing something online, not hashes. Do you need a good amount a RAM and a good CPU or it's just about the internet speed ?

  • 1
    "I mean bruteforcing something online" What, specifically? The answer may be different for bruteforcing a username/password login, versus bruteforcing credit card transactions, vs anything else. – dwizum May 20 at 15:20
27

Well, unless the site you are bruteforcing is potato, it will have rate limits locking you out after a few attempts. So the biggest resource will be the number of IP addresses you can get, to circumvent the lockout. (assuming IP is used to block)

If there is no limit, then it will likely be internet speed. Though under some extremely rare circumstances, it may be something else.

  • 7
    One of the only "extremely rare circumstances" I can think of is having physical access to the network the servers are on to connect to it directly with Ethernet, but I think getting the hashes would be easier than that... – Redwolf Programs May 19 at 18:37
  • 5
    Well, I was actually thinking something like the SCRAM protocol, where the client has to do pbkdf2 on his end, or even a variant with argon2 with high memory usage. – Peter Harmann May 20 at 0:36
  • Some sites will lock the account instead of blocking the IP after a number of tries. In that case, no amount of IP-addresses will help. You will also get no further with a supercomputer than a raspberry pi – Suppen May 20 at 6:57
  • 9
    @Suppen Yes, but that brings its own problems - it's basically a free DoS attack on the site. A simple "one login per second" is usually a lot better compromise between security and actually being able to use the service :D – Luaan May 20 at 7:28

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.