GCFA · Question #191
Brutus is a password cracking tool that can be used to crack the following authentications: HTTP(BasicAuthentication) HTTP(HTMLForm/CGI) POP3 (Post Office Protocol v3) FTP(File Transfer Protocol)…
The correct answer is B. Dictionary attack D. Hybrid attack. Brutus is a remote password auditing tool that targets network authentication services using dictionary and hybrid attack methods.
Question
Brutus is a password cracking tool that can be used to crack the following authentications:
- HTTP(BasicAuthentication)
- HTTP(HTMLForm/CGI)
- POP3 (Post Office Protocol v3)
- FTP(File Transfer Protocol)
- SMB(Server Message Block)
- Telnet
Which of the following attacks can be performed by Brutus for password cracking? Each correct answer represents a complete solution. Choose all that apply.
Options
- AReplay attack
- BDictionary attack
- CMan-in-the-middle attack
- DHybrid attack
- EBrute force attack
How the community answered
(19 responses)- A5% (1)
- B74% (14)
- C5% (1)
- E16% (3)
Why each option
Brutus is a remote password auditing tool that targets network authentication services using dictionary and hybrid attack methods.
A replay attack involves capturing and retransmitting valid authentication tokens to impersonate a user - Brutus does not capture or replay session tokens and operates only by directly testing credentials.
Brutus supports dictionary attacks by systematically submitting passwords from a predefined wordlist against target services such as HTTP, FTP, POP3, SMB, and Telnet, making it effective when target credentials match common or known passwords.
A man-in-the-middle attack requires intercepting and potentially altering traffic between two communicating parties - Brutus does not position itself in the communication path and only performs direct credential guessing against a target service.
Brutus also supports hybrid attacks, which extend dictionary attacks by applying mutations such as appending numbers or symbols to dictionary words, increasing the chance of cracking passwords that are slight variations of common terms.
Pure brute force enumeration of every possible character combination is not a primary supported attack mode in Brutus, which is specifically designed around dictionary-based and hybrid approaches rather than exhaustive character-set iteration.
Concept tested: Brutus password cracking tool - dictionary and hybrid attack support
Topics
Community Discussion
No community discussion yet for this question.