[mothered]

yeah brute forcing a specific account as opposed to using a more powerful tool such as SentryMBA which has a lot more features to utilize anyways has many flaws, you may as well try a turboer if any still exist but those are bunk also unless you have a spare machine you can afford to run it on 24/7.

Agree.

The good news Is, the majority of online users are not security-minded and a complex password Is not on their list of priorities. I've compromised literally hundreds of websites (I can provide proof on request), whereby the admin's password Is only 6 chars and very easy to guess, let alone crack. That all comes down to a "password complexity requirement" not being Implement server side resulting In poor security configurations.