nerdexam
GIAC

GCIH · Question #146

Brutus is a password cracking tool that can be used to crack the following authentications: l HTTP (Basic Authentication) l HTTP (HTML Form/CGI) l POP3 (Post Office Protocol v3) l FTP (File Transfer…

The correct answer is A. Hybrid attack C. Dictionary attack D. Brute force attack. Brutus supports hybrid, dictionary, and brute force attacks for online password cracking; replay and man-in-the-middle attacks are distinct network-layer techniques unrelated to password cracking tools.

Vulnerability Exploitation & Privilege Escalation

Question

Brutus is a password cracking tool that can be used to crack the following authentications:

l HTTP (Basic Authentication) l HTTP (HTML Form/CGI) l POP3 (Post Office Protocol v3) l FTP (File Transfer Protocol) l SMB (Server Message Block) l Telnet Which of the following attacks can be performed by Brutus for password cracking? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AHybrid attack
  • BReplay attack
  • CDictionary attack
  • DBrute force attack
  • EMan-in-the-middle attack

How the community answered

(50 responses)
  • A
    94% (47)
  • B
    4% (2)
  • E
    2% (1)

Why each option

Brutus supports hybrid, dictionary, and brute force attacks for online password cracking; replay and man-in-the-middle attacks are distinct network-layer techniques unrelated to password cracking tools.

AHybrid attackCorrect

A hybrid attack combines a dictionary wordlist with brute force mutations such as appending numbers or symbols, and Brutus supports this mode to increase cracking success rates.

BReplay attack

A replay attack captures and retransmits valid authentication tokens to gain access; it is a network protocol attack and is not a password cracking technique performed by Brutus.

CDictionary attackCorrect

A dictionary attack cycles through a predefined wordlist of common passwords and is one of Brutus's primary attack modes for the listed authentication protocols.

DBrute force attackCorrect

A brute force attack systematically tries every possible character combination until the correct password is found, and Brutus is specifically designed to perform this against HTTP, FTP, POP3, SMB, and Telnet services.

EMan-in-the-middle attack

A man-in-the-middle attack intercepts communications between two parties and is a network interception technique, not a password cracking method supported by Brutus.

Concept tested: Online password cracking attack types supported by Brutus

Source: https://owasp.org/www-community/attacks/Brute_force_attack

Topics

#password cracking#brute force#dictionary attack#hybrid attack

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GCIH Practice