eJPT Password Attacks and Credential Testing 1

Question 1

Which Hydra command correctly performs a dictionary attack against an SSH service on port 22 using a wordlist file?

Accepted Answer

hydra -l admin -P /usr/share/wordlists/rockyou.txt ssh://192.168.1.10

Answer

Hydra uses -l for a single username, -P for a password file, and the format 'protocol://target' to specify the service and host.

Question 2

What type of password attack tries every possible character combination until the correct password is found?

Accepted Answer

Brute force attack

Answer

A brute force attack systematically tries every possible combination of characters until it finds the correct password, making it exhaustive but slow.

Question 3

Which tool is commonly used on Linux to crack password hashes stored in the /etc/shadow file?

Accepted Answer

John the Ripper

Answer

John the Ripper is an offline password cracker widely used to crack Unix/Linux password hashes extracted from /etc/shadow.

Question 4

What is the difference between an online and offline password attack?

Accepted Answer

Online attacks require an active connection to a service; offline attacks crack captured hashes locally

Answer

Online attacks authenticate directly against a live service, while offline attacks crack password hashes captured from a database or file without interacting with the service.

Question 5

Which file on a Linux system stores hashed user passwords?

Accepted Answer

/etc/shadow

Answer

Modern Linux systems store hashed passwords in /etc/shadow, which is only readable by root, rather than the world-readable /etc/passwd.

eJPT Practice Test

eJPT Practice Test

eJPT Password Attacks and Credential Testing 1