An attacker takes a list containing thousands of known username$/$password combinations obtained during a data breach and uses a script to try all those combinations on a login system to see if there are any that work. What type of attack is this?

Group of answer choices

injection

broken authentication

exposure

broken access control