ExtraHop Logo
Try ExtraHop
Menu iconX icon
  • Platformchevron right
  • Solutionschevron right
  • Modern NDRchevron right
  • Resourceschevron right
  • Companychevron right
User iconSign In
Contact Us

DETECTION OVERVIEW

HTTP Brute Force Activity

Risk Factors

Web servers can be a popular target for attackers. Brute force attacks, which are low cost and relatively easy to perform, can help attackers find valid database credentials.

The system might change the risk score for this detection.

Kill Chain

Exploitation

Risk Score

60

Detection diagram
Next in Exploitation: HTTP Desync Attack

Attack Background

Before an attacker can access a database that contains valuable information, they must first acquire valid database credentials. A brute force attack is a method for guessing a weak user or system password. Brute force attacks can occur manually through trial and error or with password cracking tools.

Mitigation Options

Implement strong authentication methods for remote access services
Implement network segmentation and firewall policies to limit how devices can communicate and enforce security zones
Review authentication methods and enforce policies for secure credential creation and multi-factor authentication

MITRE ATT&CK ID

What else can RevealX do for you?

View our Periodic Table of use casesArrow pointing right