nerdexam
GIAC

GPEN · Question #124

John, a novice web user, makes a new E-mail account and keeps his password as "apple", his favorite fruit. John's password is vulnerable to which of the following password cracking attacks? Each corre

The correct answer is A. Brute Force attack B. Dictionary attack C. Hybrid attack. The simple, common-word password 'apple' is directly vulnerable to dictionary, brute force, and hybrid attacks due to its presence in standard word lists and its short length.

Exploitation & Post-Exploitation Techniques

Question

John, a novice web user, makes a new E-mail account and keeps his password as "apple", his favorite fruit. John's password is vulnerable to which of the following password cracking attacks? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ABrute Force attack
  • BDictionary attack
  • CHybrid attack
  • DRule based attack

How the community answered

(30 responses)
  • A
    77% (23)
  • D
    23% (7)

Why each option

The simple, common-word password 'apple' is directly vulnerable to dictionary, brute force, and hybrid attacks due to its presence in standard word lists and its short length.

ABrute Force attackCorrect

A brute force attack systematically attempts every possible character combination, and a short five-character password like 'apple' would be discovered quickly regardless of its composition.

BDictionary attackCorrect

A dictionary attack uses a precompiled list of common words and phrases, and 'apple' as a standard English noun would appear in virtually every standard password dictionary.

CHybrid attackCorrect

A hybrid attack combines dictionary words with rule-based mutations - 'apple' would be cracked in the initial dictionary pass of this attack before any mutations are even applied.

DRule based attack

Rule-based attacks apply specific transformation patterns derived from known password policies or breach data to mutate existing candidates, making them a more targeted technique than what is needed to crack a plain, unmodified common word.

Concept tested: Password attack types applicable to simple dictionary words

Source: https://owasp.org/www-community/attacks/Brute_force_attack

Topics

#brute force attack#dictionary attack#hybrid attack#password cracking

Community Discussion

No community discussion yet for this question.

Full GPEN Practice