Fuzzing and brute-forcing passwords