There is brute force and there is optimized brute force, the difference can be a few bazillion requests...

Keep in mind that all our flags start with ETSCTF_, that is 7 letters gifted to you.

Here is another gift, there are only 14 unique letters in there (excluding the prefix). This means that if you found a letter at one position, chances are that it is going to exist also at another one also.