Yeah depending on what you know you're fairly limited. Can you do a password reset? Malware on the owners machine? Find a db dump online that has their email and a password they used, it might be the same? Or just a wordlist attack using common passwords.
A brute force is pretty much useless if you're not using password list.