3 ms·
The one letter password guessing had some credibility long time ago thanks to unvalidated password length fields: https://jumpespjump.blogspot.com/2014/02/hacki
by hhjj 8y ago
The one letter password guessing had some credibility long time ago thanks to unvalidated password length fields: https://jumpespjump.blogspot.com/2014/02/hacking-windows-95-part-1.html https://jumpespjump.blogspot.com/2014/02/hacking-windows-95-...
But nowadays i doubt you often encounter that kind of bugs and the speed would probably be unappealing to audience.
- eridius 8y agoThe one letter password guessing still has relevance today in systems vulnerable to a timing attack. If the timing of password validation is affected by the valid-prefix length (which it would be if the password validation is a simple strcmp()) then you can use that to brute-force the password character-by-character.