Menu password attacks