OSCP Password Attacks 2

Question 1

What is password spraying and why is it preferred over traditional brute force in Active Directory environments?

Accepted Answer

Using one common password against many accounts to stay below lockout thresholds

Answer

Using many passwords against a single account to maximize coverage

Answer

Encoding passwords across multiple network segments simultaneously

Answer

Applying rainbow tables against many hash types at once

Question 2

Which Hashcat flag is used to specify a rules file that applies transformations to wordlist entries?

Accepted Answer

-r

Answer

-w

Answer

-m

Answer

-a

Question 3

What is the correct John the Ripper syntax to crack a hash file using a wordlist?

Accepted Answer

john --wordlist=wordlist.txt hashfile.txt

Answer

john --crack hashfile.txt wordlist.txt

Answer

john -w wordlist.txt -f hashfile.txt

Answer

john hashfile.txt --dict=wordlist.txt

Question 4

Which authentication protocol is particularly vulnerable to pass-the-hash attacks?

Accepted Answer

NTLM

Answer

SSH

Answer

FTP

Answer

Kerberos

Question 5

What is the purpose of the rockyou.txt wordlist in password attacks?

Accepted Answer

It is a large compilation of real-world leaked passwords from a data breach

Answer

It contains known exploits for common web applications

Answer

It contains default credentials for common network devices

Answer

It is a curated list of commonly used administrative usernames

Question 6

Which tool supports HTTP POST form brute force attacks for testing web application login pages?

Accepted Answer

Hydra

Answer

Hashcat

Answer

John the Ripper

Answer

Mimikatz

Question 7

What is credential stuffing?

Accepted Answer

Using breached username and password pairs to attempt logins on other services

Answer

Inserting extra characters into passwords to increase complexity

Answer

Padding credential fields with SQL injection strings to bypass validation

Answer

Encrypting stolen credentials before exfiltration to avoid detection