Sometimes the quick-n-dirty hack is all that's needed to obtain glory. Case in point: instead of trying to reverse a thick-app protocol, we scripted a brute-forcer using the application and some VBS glue.