In the last lecture, we saw how to get out across site, request, forgery, attack, in this lecture,
we will start with brute force and attack.
We are going to see password, brute force and practical in the next video.
So what is a brute force attack?
A brute force attack, also known as an exhaustive search, is a cryptographic hack that relies on guessing
possible combinations of a targeted password until the correct password is discover.
The longer the password, the more combinations that will need to be tested.
A brute force attack can be time consuming.
If the password is weak, it could merely take seconds with hardly any effort.
Weak passwords are like shooting fish in a barrel for attackers, which is why all organizations should
aim for the strong possibility across all users and systems.
Brute force attacks are usually used to obtain personal information such as passwords, buzz phrases,
usernames and personal identification numbers.
Goals of brute force attack include theft of personal information such as passwords, paraphrases and
many more harassment credentials to sell to third parties posing as users who send phishing links or
specific content defacement of websites and other information in the public domain that could damage
the reputation of the organization, redirecting domains to sites holding malicious content.
There can also be useful positive gains.
Many I.T. specialists use this method to attack, to test network security and more specifically, the
strength of the encryption user network, also known as white box listing.
So what are the types of brute force attacks?
Simple brute force attack uses a systematic approach to case that doesn't rely on outer logic hybrid,
a brute force attack starts from external logic domain, which parts of the variation may be most likely
to succeed and then continues with the simple approach to try many possible variations, dictionary
attacks, guesses, usernames and passwords using a dictionary of possible strings or phrases.
A rainbow table is a computer table for reversing cryptographic hash functions.
It can be used to get a function of a certain level consisting of a limited set of characters.
A reverse brute force attack uses a common password or collection of passwords against many possible
user names.
It targets a network of users for which the attackers have previously obtained the data.
Credential stuffing, it uses previously known password and username peer's trying them against multiple
websites, it exposes the fact that many users have the same username and password across different
systems.
Brute force attacks typically rely on weak passwords and careless network administration.
Fortunately, these are both areas that can be improved easily in order to prevent the vulnerabilities
that could bring your network or website resources to keep in the knees.
For example, utilizing strong passwords, allowing a limited number of long ATMs, and enabling Two-Factor
authentication can help to prevent brute force attacks.
Ultimately, it is important to educate your organization on the importance of password strength and
the general information security habits.
Even with a strong password, Implats can fall victim to insider threats, your security is not strong
part of your culture.
So on your screen, you can see that how to prevent brute force attacks never use information that can
be found online, like the names of family members, like the example Samual 1998 have as many as characters
possible.
Like you can see Samuel Adut Phillips landed like here is every each and every combination.
Like there are letters, there are special characters as well as their numbers combined letters, numbers
and symbols.
The first is capital letters of Semmel, as is capital.
The next small.
Then again, B is capital.
Then the special letter Aderet and the Ninety-eight and then exclamation mark.
These types of passwords are difficult to brute force, be different for each user account.
Like don't keep the same password for each and every account for Gmail.
You can keep something different.
For Instagram, you can keep something different for Facebook, give something different.
Our common patterns, like if your name is Samuel and your birthdate is in 1998, so just don't put
the password as Samuel Alderete 1990, our D mistakes else.
The brute forcing password is very easy.
In the next lecture we will see the practical approach on how to brute force the attacks using absolute.