[leetcrew]

for most public websites, you can reverse engineer the rules pretty easily by trying to create accounts. this can be automated pretty easily.

in any case, the only reasonable rules for passwords are probably a length requirement and possibly requiring numbers and/or symbols. knowing that a password must be at least 8 chars and include at least one number and a symbol does not reduce the search space by much.