A type of active attack used to gain information by cracking passwords through trial and error. They may use automated software to try hundreds of likely passwords.