Difference between revisions of "Brute force attack"

Jump to: navigation, search
(Related vulnerabilities)
Line 13: Line 13:
==Related vulnerabilities==
==Related vulnerabilities==
[[Weak credentials]]
* [[Weak credentials]]
[[J2EE Misconfiguration: Insufficient Session-ID Length]]
* [[J2EE Misconfiguration: Insufficient Session-ID Length]]
==Related countermeasures==
==Related countermeasures==

Revision as of 19:13, 11 June 2006

This is an Attack. To view all attacks, please see the Attack Category page.

This article is a stub. You can help OWASP by expanding it or discussing it on its Talk page.

What is a Brute force attack?

In a brute force attack, the attacker attempts to bypass a security check by attempting possible options until finding one that works. The attacker attempts to exhaust the search space as efficiently as possible. With knowledge of the size of the search space and the rate that attempts can be made, one can calculate the length of time the brute force attack is likely to take.

Common uses of the attack technique

Brute force attacks are frequently used to attempt bypass of password based authentication schemes and cryptographic protection.

Related vulnerabilities

Related countermeasures

Password based authentication