An analyst is testing the security of a server and attempting to infiltrate the network. The analyst is able to obtain the following output after running some tools on the server. Which of the…

Question

Options

• AUse John the Ripper to attempt password recovery
• BLog in with either of the administrator passwords shown
• CLog in with the guest account since it has a blank password
• DUse Medusa to perform an online attack of the HELPOESK account

• A
  3% (1)
• B
  18% (6)
• C
  70% (23)
• D
  9% (3)

Explanation

The tool output (likely a credential dump from a tool such as Mimikatz or a SAM database extraction) shows password hashes for local accounts. The guest account hash matches the well-known hash value for an empty/blank password (e.g., the NTLM hash of an empty string is 'aad3b435b51404eeaad3b435b51404ee' for the LM portion). Because the blank password is immediately recognizable without any cracking, the most efficient next step is to log directly into the guest account - no tools or extra time required. Option A (John the Ripper) would be used to crack hashes that are NOT already identifiable; the blank password hash needs no cracking. Option B is incorrect because the administrator hashes shown are not plaintext passwords - you cannot log in directly from a hash without a pass-the-hash technique, which is not listed. Option D (Medusa for online brute force) is unnecessary when the password is already known to be blank.

No community discussion yet for this question.