OSCP Password Attacks 3

Question 1

Which tool is used to extract password hashes and plaintext credentials from Windows LSASS process memory?

Accepted Answer

Mimikatz

Answer

PsExec

Answer

PowerSploit

Answer

BloodHound

Question 2

What Hashcat attack mode number (-a) is used for mask (pattern-based brute force) attacks?

Accepted Answer

-a 3

Answer

-a 0

Answer

-a 1

Answer

-a 6

Question 3

Which Hashcat hash mode number (-m) is used to crack NTLM hashes?

Accepted Answer

1000

Answer

0

Answer

500

Answer

1800

Question 4

What is a pass-the-hash (PtH) attack?

Accepted Answer

Authenticating with a captured NTLM hash without needing the plaintext password

Answer

Sharing password hashes across servers for redundant authentication

Answer

Cracking hashes by passing them sequentially through rainbow tables

Answer

Converting one hash algorithm to another for cross-platform compatibility

Question 5

Which Impacket script is commonly used to perform pass-the-hash attacks and obtain a remote shell on Windows systems?

Accepted Answer

impacket-psexec

Answer

impacket-pth

Answer

impacket-hashpass

Answer

impacket-smbexec

Question 6

Which command combines /etc/passwd and /etc/shadow into a format suitable for cracking with John the Ripper?

Accepted Answer

unshadow

Answer

shadow2john

Answer

hashextract

Answer

combinepasswd

Question 7

In a Hashcat mask attack, what character set does the placeholder '?d' represent?

Accepted Answer

Any digit 0-9

Answer

Any lowercase letter a-z

Answer

Any special character

Answer

Any printable ASCII character