fixed bruteforce