Password Guessing

Adversaries systematically test candidate passwords against accounts without prior knowledge of the correct password, commonly using wordlists. Targets include reachable remote authentication services (such as SSH, RDP, SMB, LDAP, and Kerberos) and cloud sign-in applications. The technique can be performed from the Internet without an internal foothold when a selected authentication interface is exposed and reachable; this does not imply that any particular deployment exposes it.