Bob is doing a password assessment for one of his clients. Bob suspects that security policies are not in place. He also suspects that weak passwords are probably the norm throughout the company he…

Hardware keyloggers (physical devices attached to keyboards or USB ports), software keyloggers (malicious applications capturing keystrokes), and network sniffing (capturing cleartext credentials over the wire using tools like Wireshark) collectively represent the full spectrum of password retrieval techniques available to an assessor.

Hardware and software keyloggers alone omit network sniffing, which is a distinct and highly effective method for capturing credentials transmitted in plaintext protocols like Telnet, FTP, or HTTP.

This overstates hardware keyloggers as always the best method; software keyloggers and sniffing are often more scalable and less detectable in enterprise environments.

Limiting retrieval to software only ignores hardware keyloggers and sniffing, both of which are valid and commonly used password capture techniques.