eJPT Password Attacks and Cracking 4

Question 1

Which tool is used to extract password hashes from a Windows SAM database?

Accepted Answer

Mimikatz

Answer

Mimikatz is a post-exploitation tool that can extract NTLM hashes, plaintext credentials, and Kerberos tickets from Windows memory and the SAM database.

Question 2

What is the purpose of the 'unshadow' command in John the Ripper?

Accepted Answer

It combines /etc/passwd and /etc/shadow into a single crackable file

Answer

The unshadow command merges /etc/passwd and /etc/shadow into a single file in the format John the Ripper needs to crack Linux password hashes.

Question 3

In Hashcat mask attacks, what character set does '?d' represent?

Accepted Answer

Digits 0-9

Answer

In Hashcat mask syntax, ?d represents the digit character set (0-9), ?l is lowercase, ?u is uppercase, and ?s is special characters.

Question 4

Which attack method is most effective against WPA2 Wi-Fi passwords?

Accepted Answer

Capturing the 4-way handshake and performing offline dictionary/brute-force cracking

Answer

WPA2 cracking requires capturing the 4-way EAPOL handshake (using tools like airodump-ng), then cracking the PBKDF2-HMAC-SHA1 hash offline with Hashcat or Aircrack-ng.

Question 5

What is a hybrid attack in the context of password cracking?

Accepted Answer

An attack that combines a wordlist with a brute-force mask appended or prepended to each word

Answer

A hybrid attack takes words from a dictionary and appends or prepends brute-force character combinations to each word, targeting passwords like 'password123' or 'abc!password'.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eJPT Password Attacks and Cracking 4