What is Brute Force Attack

You do not exploit any vulnerability in brute force attacks on the web application. Rather, you try out all the combinations and permutations of the victim's passwords and usernames and try to see if you get one.

Read this article to learn more in detail: https://www.loginradius.com/blog/start-with-identity/2021/02/brute-force-lockout/