how can a hacker crack a password but avoid the “login attempt lockout” timers?

Question

If (say) only 5 login attempts are allowed in succession before the account is locked, how do hackers get around this?

In: 1

Answer 1

You don’t crack passwords sitting in front of the login prompt. You use some exploit that lets you get into the backend of the system *without* the password then copy the whole ass database to your own computer. Or you do some social engineering and ask somebody who has a password that lets you get at the database to tell you. From there you can poke at the hashed (hopefully lmao) passwords at your leisure.