Technique
technique:password_guessing
Also: brute-forcing passwords, password brute force
Attempting to gain access by guessing account names or passwords using information about users and accounts.
Attempting to gain access by guessing account names or passwords using information about users and accounts.
“there was password-guessing”
Inferring passwords from repeated organizational patterns and trying them against cloud and VPN access.
“After a few hours at guessing VPN passwords, he finally gets it.”
“I spent maybe the next two hours trying to get into it.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | The Pit | Explicit | 83 |
| incoming | USES | Adam Georgeson | Explicit | 113 |
The Pit USES password guessing
Jeff describes the team using password guessing to access idle accounts and identify passwords.
Explicit Confidence 98% · Jeff Man EP 83 Details
“what was commonly done back then to break into UNIX systems and UNIX networks was – there was password-guessing”
Adam Georgeson USES password guessing
Adam guessed Office 365 and VPN passwords by following the Academy’s password patterns.
Explicit Confidence 99% · Jack Rhysider EP 113 Details
“After a few hours at guessing VPN passwords, he finally gets it.”