Recent PAM implementations allow you to use su to rapidly crack accounts without being logged. Tested on RH 6.1.