brute-force dictionary-based attack