But you're not reversing it, you're only brute-forcing a collision. It won't tell you if you've found the original password or a different string that coinciden

But you're not reversing it, you're only brute-forcing a collision. It won't tell you if you've found the original password or a different string that coincidentally hashes the same with that particular algorithm.