What is a dictionary attack?

When cracking passwords or keys, try the attack methods of possible passwords (words or phrases) in user-defined dictionaries one by one. Unlike brute force cracking, brute force cracking tries all possible combination passwords one by one, while dictionary attacks use a predefined list of words (possible passwords).

Analyzing the above scenario, two elements are needed to implement dictionary attack:

Hackers know the authentication method (including authentication protocol, address, port and other information), just like thieves need to know where the warehouse is, whether the door is hung with a big copper lock or a password lock, and even iris and fingerprint identification. It is obviously unrealistic to open the fingerprint identification lock with a pile of metal keys.

Hackers have a comprehensive password set, including all kinds of common weak passwords, or combination passwords that often appear in the target system, or password sets that have been leaked by the target system. Only in this way can we have more opportunities to try. Usually, the implementation of dictionary attacks is still time-consuming, especially the password of the target system is not common.