312-50V11 · Question #1017
In an attempt to damage the reputation of a competitor organization, Hailey, a professional hacker, gathers a list of employee and client email addresses and other related information by using various
The correct answer is B. CeWL. CeWL (Custom Word List generator) is an automated tool that spiders a target website and generates a custom wordlist from the content found, making it ideal for targeted brute-force attacks.
Question
In an attempt to damage the reputation of a competitor organization, Hailey, a professional hacker, gathers a list of employee and client email addresses and other related information by using various search engines, social networking sites, and web spidering tools. In this process, she also uses an automated tool to gather a list of words from the target website to further perform a brute-force attack on the previously gathered email addresses. What is the tool used by Hailey for gathering a list of words from the target website?
Options
- AShadowsocks
- BCeWL
- CPsiphon
- DOrbot
How the community answered
(46 responses)- A4% (2)
- B91% (42)
- C2% (1)
- D2% (1)
Why each option
CeWL (Custom Word List generator) is an automated tool that spiders a target website and generates a custom wordlist from the content found, making it ideal for targeted brute-force attacks.
Shadowsocks is a secure SOCKS5 proxy protocol used for circumventing internet censorship, not a wordlist generation tool.
CeWL is a Ruby-based tool specifically designed to crawl a target website and extract words to build a custom wordlist. Because it pulls vocabulary directly from the target's own content, the resulting list is highly relevant for password and credential brute-force attacks against that organization's accounts. This makes it far more effective than a generic dictionary for targeted attacks.
Psiphon is a censorship-circumvention and VPN tool for bypassing internet restrictions, not a website spidering or wordlist tool.
Orbot is an Android app that routes traffic through the Tor network for anonymity, not a wordlist generation or web spidering tool.
Concept tested: CeWL custom wordlist generation from target websites
Source: https://github.com/digininja/CeWL
Topics
Community Discussion
No community discussion yet for this question.