eJPT Password Attacks and Cracking 5

Question 1

Which command correctly invokes Hydra to brute-force SSH on a non-standard port 2222?

Accepted Answer

hydra -l admin -P passwords.txt -s 2222 target ssh

Answer

Hydra uses -s to specify a non-standard port, so 'hydra -l admin -P passwords.txt -s 2222 target ssh' targets SSH on port 2222.

Question 2

What is the main advantage of bcrypt over MD5 for password storage?

Accepted Answer

bcrypt is intentionally slow and includes a work factor that makes brute-force cracking much harder

Answer

bcrypt uses a configurable work factor (cost parameter) that makes it computationally expensive to compute, drastically slowing brute-force and dictionary attacks compared to fast hashes like MD5.

Question 3

When performing a password attack, what does the term 'offline cracking' mean?

Accepted Answer

Cracking captured hashes on a local machine without interacting with the target service

Answer

Offline cracking means you've obtained hash values and crack them locally, avoiding account lockouts and network detection since you're not making login attempts against the live service.

Question 4

Which eJPT-relevant scenario best describes when you would use Mimikatz's 'sekurlsa::logonpasswords' module?

Accepted Answer

To dump cleartext credentials and hashes from Windows LSASS process memory after gaining admin access

Answer

sekurlsa::logonpasswords dumps credentials cached in the LSASS process memory on Windows, often revealing cleartext passwords of recently logged-in users, but requires admin/SYSTEM privileges.

Question 5

What flag in John the Ripper specifies using a custom wordlist for cracking?

Accepted Answer

john --wordlist=wordlist.txt hash.txt

Answer

The --wordlist flag in John the Ripper specifies the path to a custom wordlist file, as in 'john --wordlist=rockyou.txt hashes.txt'.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eJPT Password Attacks and Cracking 5