nerdexam
EC-Council

312-50V11 · Question #967

Tony is a penetration tester tasked with performing a penetration test. After gaining initial access to a target system, he finds a list of hashed passwords. Which of the following tools would not…

The correct answer is C. netcat. Netcat is a raw network communication utility with no password hash cracking capability, making it the only tool in the list that cannot crack hashed passwords.

System Hacking

Question

Tony is a penetration tester tasked with performing a penetration test. After gaining initial access to a target system, he finds a list of hashed passwords. Which of the following tools would not be useful for cracking the hashed passwords?

Options

  • AJohn the Ripper
  • BHashcat
  • Cnetcat
  • DTHC-Hydra

How the community answered

(40 responses)
  • A
    3% (1)
  • C
    93% (37)
  • D
    5% (2)

Why each option

Netcat is a raw network communication utility with no password hash cracking capability, making it the only tool in the list that cannot crack hashed passwords.

AJohn the Ripper

John the Ripper is a dedicated offline password cracking tool that supports a wide range of hash formats and attack modes including dictionary and brute-force.

BHashcat

Hashcat is a GPU-accelerated offline password cracking tool supporting hundreds of hash algorithms and multiple advanced attack modes.

CnetcatCorrect

Netcat is designed to read and write data across TCP/UDP network connections and is used for tasks like port scanning, banner grabbing, and data transfer - it has no functionality to process, analyze, or attack password hashes. It contains none of the cryptographic attack logic (dictionary, brute-force, or rule-based attacks) required to crack hashed credentials. Unlike the other three tools listed, netcat has no role in offline hash cracking workflows.

DTHC-Hydra

THC-Hydra is a fast network login brute-force tool designed to attack authentication services, making it applicable to password cracking scenarios.

Concept tested: Distinguishing password cracking tools from network utilities

Source: https://nmap.org/ncat/guide/index.html

Topics

#password cracking#hash cracking#penetration testing tools#netcat

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice