eJPT Password Attacks and Cracking 2

Question 1

Which Hashcat attack mode uses a wordlist combined with rules to generate password candidates?

Accepted Answer

Wordlist mode with rules (-a 0 -r)

Answer

Hashcat's straight/wordlist mode (-a 0) paired with a rules file (-r) applies transformations like capitalization and substitutions to each word in the list.

Question 2

What is the primary difference between a dictionary attack and a brute-force attack?

Accepted Answer

Dictionary attacks use a predefined list of words while brute-force tries all character combinations

Answer

A dictionary attack tests passwords from a predefined wordlist, while brute-force exhaustively tries every possible combination of characters.

Question 3

Which tool is specifically designed for online password attacks against services like SSH and FTP?

Accepted Answer

Hydra

Answer

Hydra is a parallelized network login cracker that supports online brute-force attacks against protocols like SSH, FTP, HTTP, and many others.

Question 4

What does the rockyou.txt wordlist contain?

Accepted Answer

Plaintext passwords leaked from the 2009 RockYou data breach

Answer

rockyou.txt contains approximately 14 million plaintext passwords leaked from the 2009 RockYou social game company data breach.

Question 5

In a pass-the-hash attack, what is actually passed to authenticate?

Accepted Answer

The NTLM hash of the password

Answer

Pass-the-hash attacks use the captured NTLM hash directly to authenticate to Windows services without needing to crack it to plaintext.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eJPT Password Attacks and Cracking 2