I remember RevengeDriven posting in one of my question threads... he seemed to get banned for being an ass though. Not sure he was the great hacker/cracker he thought he was.
Either way, wouldn't an automated form submission program get your IP blocked from just about every worthwhile website you use it on? A brute-forcer will create millions of combinations before finding the correct one, and even with rainbow tables or dictionary attacks, we're talking thousands of combos. As a webmaster, I would make sure to block any user taking up that much bandwidth. Additionally, sending requests to the external server would make even a tiny password of four or five characters take an incredibly long time to find.
Maybe he found a way to bypass all that though... either that or he has a lot of time on his hands
