312-50V12 · Question #306
In an attempt to damage the reputation of a competitor organization, Hailey, a professional hacker, gathers a list of employee and client email addresses and other related information by using various
The correct answer is A. CeWL. Hailey is utilizing a specific tool to extract a list of words from a competitor's website, which will then be used to create a custom dictionary for a subsequent brute-force attack on gathered email addresses.
Question
Options
- ACeWL
- BOrbot
- CShadowsocks
- DPsiphon
How the community answered
(32 responses)- A91% (29)
- B6% (2)
- D3% (1)
Why each option
Hailey is utilizing a specific tool to extract a list of words from a competitor's website, which will then be used to create a custom dictionary for a subsequent brute-force attack on gathered email addresses.
CeWL (Custom Word List generator) is an open-source tool specifically designed to spider a target URL and generate a list of unique words found on the website, which is then used to create a custom dictionary for password guessing or brute-force attacks. This perfectly matches the attacker's objective of gathering words from the target website for a brute-force attack.
Orbot is an application that routes internet traffic through the Tor network, primarily used for anonymization and bypassing censorship, not for generating word lists from websites.
Shadowsocks is a secure socks5 proxy designed for bypassing internet censorship and ensuring private communication, not for extracting words from web pages.
Psiphon is an internet circumvention tool used to bypass censorship and access blocked content, and it does not provide functionality for generating word lists from target websites.
Concept tested: Reconnaissance tools for custom dictionary generation
Source: https://github.com/digininja/CeWL
Topics
Community Discussion
No community discussion yet for this question.