312-50V10 · Question #666
In the context of password security, a simple dictionary attack involves loading a dictionary file (a text file full of dictionary words) into a cracking application such as L0phtCrack or John the Rip
The correct answer is C. Hybrid. A hybrid attack combines dictionary-based wordlists with brute force permutations to test common words and their variations against user account passwords.
Question
In the context of password security, a simple dictionary attack involves loading a dictionary file (a text file full of dictionary words) into a cracking application such as L0phtCrack or John the Ripper, and running it against user accounts located by the application. The larger the word and word fragment selection, the more effective the dictionary attack is. The brute force method is the most inclusive, although slow. It usually tries every possible letter and number combination in its automated exploration. If you would use both brute force and dictionary methods combined together to have variation of words, what would you call such an attack?
Options
- AFull Blown
- BThorough
- CHybrid
- DBruteDics
How the community answered
(33 responses)- A3% (1)
- C94% (31)
- D3% (1)
Why each option
A hybrid attack combines dictionary-based wordlists with brute force permutations to test common words and their variations against user account passwords.
Full Blown is not a recognized or standardized password cracking methodology in security literature or tooling.
Thorough is a generic descriptive adjective and not a defined attack technique in password cracking terminology.
A hybrid attack is the recognized industry term for combining a dictionary attack with brute force techniques. It takes words from a wordlist and applies mutations such as appending numbers, symbols, or character substitutions, making it more effective than either method in isolation. Password cracking tools like John the Ripper and L0phtCrack both implement hybrid attack modes.
BruteDics is not a standardized term in the security industry for any recognized password attack method.
Concept tested: Hybrid password attack combining dictionary and brute force
Topics
Community Discussion
No community discussion yet for this question.