GPEN · Question #124
John, a novice web user, makes a new E-mail account and keeps his password as "apple", his favorite fruit. John's password is vulnerable to which of the following password cracking attacks? Each corre
The correct answer is A. Brute Force attack B. Dictionary attack C. Hybrid attack. The simple, common-word password 'apple' is directly vulnerable to dictionary, brute force, and hybrid attacks due to its presence in standard word lists and its short length.
Question
John, a novice web user, makes a new E-mail account and keeps his password as "apple", his favorite fruit. John's password is vulnerable to which of the following password cracking attacks? Each correct answer represents a complete solution. Choose all that apply.
Options
- ABrute Force attack
- BDictionary attack
- CHybrid attack
- DRule based attack
How the community answered
(30 responses)- A77% (23)
- D23% (7)
Why each option
The simple, common-word password 'apple' is directly vulnerable to dictionary, brute force, and hybrid attacks due to its presence in standard word lists and its short length.
A brute force attack systematically attempts every possible character combination, and a short five-character password like 'apple' would be discovered quickly regardless of its composition.
A dictionary attack uses a precompiled list of common words and phrases, and 'apple' as a standard English noun would appear in virtually every standard password dictionary.
A hybrid attack combines dictionary words with rule-based mutations - 'apple' would be cracked in the initial dictionary pass of this attack before any mutations are even applied.
Rule-based attacks apply specific transformation patterns derived from known password policies or breach data to mutate existing candidates, making them a more targeted technique than what is needed to crack a plain, unmodified common word.
Concept tested: Password attack types applicable to simple dictionary words
Source: https://owasp.org/www-community/attacks/Brute_force_attack
Topics
Community Discussion
No community discussion yet for this question.