312-50V11 · Question #967
Tony is a penetration tester tasked with performing a penetration test. After gaining initial access to a target system, he finds a list of hashed passwords. Which of the following tools would not…
The correct answer is C. netcat. Netcat is a raw network communication utility with no password hash cracking capability, making it the only tool in the list that cannot crack hashed passwords.
Question
Tony is a penetration tester tasked with performing a penetration test. After gaining initial access to a target system, he finds a list of hashed passwords. Which of the following tools would not be useful for cracking the hashed passwords?
Options
- AJohn the Ripper
- BHashcat
- Cnetcat
- DTHC-Hydra
How the community answered
(40 responses)- A3% (1)
- C93% (37)
- D5% (2)
Why each option
Netcat is a raw network communication utility with no password hash cracking capability, making it the only tool in the list that cannot crack hashed passwords.
John the Ripper is a dedicated offline password cracking tool that supports a wide range of hash formats and attack modes including dictionary and brute-force.
Hashcat is a GPU-accelerated offline password cracking tool supporting hundreds of hash algorithms and multiple advanced attack modes.
Netcat is designed to read and write data across TCP/UDP network connections and is used for tasks like port scanning, banner grabbing, and data transfer - it has no functionality to process, analyze, or attack password hashes. It contains none of the cryptographic attack logic (dictionary, brute-force, or rule-based attacks) required to crack hashed credentials. Unlike the other three tools listed, netcat has no role in offline hash cracking workflows.
THC-Hydra is a fast network login brute-force tool designed to attack authentication services, making it applicable to password cracking scenarios.
Concept tested: Distinguishing password cracking tools from network utilities
Source: https://nmap.org/ncat/guide/index.html
Topics
Community Discussion
No community discussion yet for this question.