Official Writer Discussion

There is no brute forcing needed. You can try simple owasp top 10 attacks