yeah you have to bruteforce atleast once but after that there is a rather cool method developed by pica.

its there in the tutorials section.