basic bruteforcer