Brute Force

Credential stuffing, password spraying, rate-limit bypass, and dictionary attacks against authentication endpoints.