Unverified50% confidenceFactExact time
Password spraying's low-frequency, wide-net strategy can bypass the per-account lockout mechanisms that most enterprises rely on.
1
Sources
50%
Confidence
Long-term
Relevance
11/3/2026
First Seen
Sources
密码喷洒攻击：为何账户锁定策略形同虚设
Related Entities
Related Claims
UnverifiedPassword spraying refers to trying a small number of high-frequency weak passwords against a large number of accounts to circumvent the 'lockout after multiple failures' policy.78% similarUnverifiedPassword spraying does not require breached data; it sweeps a large number of accounts with only a small set of common passwords, relying on users choosing weak passwords.76% similarUnverifiedDefault passwords and weak credentials are the most common途径 by which IoT devices are compromised, and many commercial devices ship with uniform credentials such as admin/admin or root/12345.73% similarUnverifiedWhether a password guessing attack succeeds depends on whether the target system has imposed restrictions on login frequency, such as CAPTCHAs, IP banning, and account lockout.73% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1131493API
curl https://kongchang.com/api/v1/knowledge/claims/1131493MCP
get_claim(id=1131493)