You don't need access to the system, you can gather the password hash over the network.
And yes a 6 charcter is pretty eacy to crack, 8, 10, 12, etc take longer but not all that much longer.