The software uses a dictionary-based attack, where it attempts to try all possible combinations of words, phrases, and characters to guess the password. The tool also supports multi-threading, which allows it to try multiple combinations simultaneously, making the process faster.