You can hack an account with bruteforce bot, so that bot will try every combination to login in. Its same to rcon bruteforce. But this method take so many time. Also password information (hash) is stored in server database wich is hard to hack it, if you dont know same host informtion.