This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Brute force attack"
(→Common uses of the attack technique) |
(→Common uses of the attack technique) |
||
| Line 11: | Line 11: | ||
Brute force attacks are frequently used to attempt bypass of password based authentication schemes and cryptographic protection. | Brute force attacks are frequently used to attempt bypass of password based authentication schemes and cryptographic protection. | ||
| − | This kind of attack can also be used in attempt to discover web directory structure, and is then said to be a URL brute force attack. | + | This kind of attack can also be used in attempt to discover web directory structure and content, and is then said to be a URL brute force attack. |
==Related vulnerabilities== | ==Related vulnerabilities== | ||
Revision as of 10:20, 5 December 2006
- This is an Attack. To view all attacks, please see the Attack Category page.
This article is a stub. You can help OWASP by expanding it or discussing it on its Talk page.
What is a Brute force attack?
In a brute force attack, the attacker attempts to bypass a security check by attempting possible options until finding one that works. The attacker attempts to exhaust the search space as efficiently as possible. With knowledge of the size of the search space and the rate that attempts can be made, one can calculate the length of time the brute force attack is likely to take.
Common uses of the attack technique
Brute force attacks are frequently used to attempt bypass of password based authentication schemes and cryptographic protection.
This kind of attack can also be used in attempt to discover web directory structure and content, and is then said to be a URL brute force attack.
Related vulnerabilities
Tools
DIRB from http://sourceforge.net/projects/dirb/
