1.Pre-auth bruteforce