brute force string search