[mothered]

Only if I can code an actual BF or, use a dictionary method.

For mediocre sites, It'll probably work but most entities on a large scale have account lockout policies, so such attack vectors are futile.