What are different types of brute-force attacks?

That's a very insightful follow-up question! While "brute-force attack" is often used as an umbrella term, there are indeed several distinct types or strategies that attackers employ, often depending on the target and available information.

Here are the main types of brute-force attacks:

1. Simple Brute-Force Attack (Pure Brute-Force):

   • Description: This is the most basic form where the attacker tries every single possible combination of characters (letters, numbers, symbols) of a certain length until the correct password is found.
   • Pros: Guaranteed to find the password if given enough time and resources.
   • Cons: Extremely time-consuming and computationally intensive, especially for long and complex passwords. For example, guessing an 8-character password with uppercase, lowercase, numbers, and symbols could take billions of years with current technology.
   • Example: Trying "a", "b", "c", ..., "aa", "ab", "ac", ...

2. Dictionary Attack:

   • Description: Instead of trying every possible combination, attackers use lists of commonly used usernames and passwords, often called "dictionaries" or "wordlists." These lists are compiled from leaked credentials, common words, names, places, etc.
   • Pros: Much faster than pure brute-force for common or weak passwords, as it focuses on highly probable guesses.
   • Cons: Only works if the password is in the dictionary. It won't find a strong, unique password not present in the list.
   • Example: Trying password, 123456, admin, qwerty, dragon.

3. Hybrid Attack:

   • Description: This is a combination of dictionary and pure brute-force attacks. Attackers take words from a dictionary and then add numbers, special characters, or alter capitalization to create more complex but still recognizable password variations.
   • Pros: More effective than a pure dictionary attack against slightly more complex passwords (e.g., adding a year to a common word).
   • Cons: Still limited by the initial dictionary wordlist and the defined alterations.
   • Example: Taking password and trying password1, password123, Password!, Pa$$word, admin2023.

4. Credential Stuffing:

   • Description: This attack leverages data breaches. Attackers take username/password combinations that were stolen from one website and try them on other websites.
   • Pros: Highly effective because many users reuse the same passwords across multiple services. If a user's credentials are leaked from site A, there's a good chance they'll work on site B.
   • Cons: Requires access to previously leaked credential databases.
   • Example: Using user@example.com and MyPassword123 (stolen from a forum breach) to try and log into the user's banking website.

5. Reverse Brute-Force Attack:

   • Description: Instead of trying many passwords for one username, attackers use one common or compromised password and try it against a large list of usernames. The goal is to find accounts that use that specific, weak password.
   • **Pros: ** Useful for identifying multiple accounts using a very weak or default password.
   • Cons: Less effective if no common weak password is known.
   • Example: Trying the password password123 against a list of thousands of common usernames like admin, test, john.doe, support.

In this lab, when we use Hydra, we'll primarily be performing dictionary attacks and potentially hybrid attacks by providing it with wordlists to try against the target login page.

Understanding these different types helps you appreciate the various ways attackers attempt to compromise accounts and the importance of strong, unique passwords for cybersecurity.

Do any of these types particularly pique your interest, or would you like to know more about how to defend against them?