Mock all you want, a brute force attack (why the quotes? This is literally the textbook brute force attack) is an important part of pentesting.