They say from Blockchain's info support, that even the 12 word thingy doesn't recover the 2nd password.
No, it does not. It recovers the private keys to your Bitcoin addresses and thus allows you to export the private keys for your wallet, much like we did with Armory here. Using the 12 word recovery phrase completely bypasses the need for any of your passwords, which is why I said that you should find it.
There are password crackers that use brute force, but without any idea what the password could be, they are not very useful.