Brute-Force Attack

**Executive Summary:** This document is an informational overview of brute-force attacks, describing their types (knowledge-based, dictionary, credential stuffing, reverse brute-force, hybrid, password spraying, offline hash cracking), the typical attack workflow, reasons they remain effective, and recommended defenses including strong passwords, MFA, rate limiting, CAPTCHA, IP controls, monitoring, zero trust, user training, and endpoint security.