Skip to main content

All Questions

Filter by
Sorted by
Tagged with
15 votes
3 answers
3k views

Are HTTP brute-force password-guessing attacks common nowadays?

Are brute-force attacks against online accounts (gmail, facebook, instagram) something that really happens? I don't mean something like cracking password hashes or DDoS, but real brute-force attacks (...
Martin's user avatar
  • 535
4 votes
4 answers
1k views

Ethical brute force demo on a web login when knowing the password complexity requirements

We are currently having accounts compromised at a substantially high rate. Some in the organization believe that our password complexity requirements is enough to thwart brute force attacks. I wanted ...
Belmin Fernandez's user avatar
8 votes
5 answers
2k views

Attack vectors for brute-forcing website passwords

When talking about password security, a lot of discussion centers on the risk of a password being guessed in a brute-force attack. For websites where a user has registered an account, what are the ...
jrdioko's user avatar
  • 13.2k