Re: Brute forcing account logins.

[dwm042]

I can't speak for the switches or routers, but you have a list you can't trust for passwords on servers whose status you don't know. I'd be thinking about live disks and commenting out the root password in /etc/shadow.

[plobsing]

If he had access to the shadow file, he could just hash the passwords and create a lookup table to run on the shadow files.