GCFA · Question #292
Which of the following types of attack can guess a hashed password?
The correct answer is C. Brute force attack. A brute force attack cracks hashed passwords by exhaustively hashing candidate passwords and comparing them to the stored hash until a match is found.
Question
Which of the following types of attack can guess a hashed password?
Options
- ADenial of Service attack
- BEvasion attack
- CBrute force attack
- DTeardrop attack
How the community answered
(17 responses)- A6% (1)
- B6% (1)
- C82% (14)
- D6% (1)
Why each option
A brute force attack cracks hashed passwords by exhaustively hashing candidate passwords and comparing them to the stored hash until a match is found.
A Denial of Service attack floods a target system with traffic or requests to exhaust resources and make services unavailable - it has no mechanism for attempting, guessing, or recovering password values.
An evasion attack is designed to bypass or circumvent security controls such as IDS/IPS signatures and filters - it targets detection systems and does not involve password guessing or hash cracking.
A brute force attack against a hashed password works by systematically generating candidate plaintext values, applying the same hashing algorithm used to create the stored hash, and comparing the result against the target hash. Given enough time and compute resources, this approach will eventually find the correct password regardless of complexity.
A Teardrop attack exploits vulnerabilities in TCP/IP packet fragmentation reassembly to crash a target system - it is a network-layer exploitation technique with no relationship to password hashing or credential recovery.
Concept tested: Brute force attack against hashed password credentials
Source: https://owasp.org/www-community/attacks/Brute_force_attack
Topics
Community Discussion
No community discussion yet for this question.