nerdexam
GIAC

GPEN · Question #157

Which of the following tools automates password guessing in the NetBIOS session?

The correct answer is C. Legion. Legion is a specialized tool that automates brute-force password guessing against NetBIOS sessions on Windows networks, making it the correct choice among the options listed.

Exploitation & Post-Exploitation Techniques

Question

Which of the following tools automates password guessing in the NetBIOS session?

Options

  • AL0phtCrack
  • BJohn the Ripper
  • CLegion
  • DNTInfoScan

How the community answered

(29 responses)
  • A
    10% (3)
  • B
    3% (1)
  • C
    79% (23)
  • D
    7% (2)

Why each option

Legion is a specialized tool that automates brute-force password guessing against NetBIOS sessions on Windows networks, making it the correct choice among the options listed.

AL0phtCrack

L0phtCrack is an offline Windows password auditing tool that recovers credentials by cracking NTLM and LM password hashes, not by automating live authentication attempts against NetBIOS sessions.

BJohn the Ripper

John the Ripper is a general-purpose offline password hash cracker that operates against stored hash files, not against live NetBIOS session authentication.

CLegionCorrect

Legion is a network scanner and brute-force utility that specifically targets NetBIOS sessions, automatically attempting to authenticate to Windows file shares and other NetBIOS-based services using dictionary or brute-force methods. It can sweep IP ranges, enumerate NetBIOS shares, and systematically guess credentials without manual intervention. This direct focus on automating NetBIOS session password attacks distinguishes it from the other tools listed.

DNTInfoScan

NTInfoScan is a Windows network enumeration and information-gathering tool used to collect system and share details, not to perform automated password guessing against NetBIOS sessions.

Concept tested: NetBIOS session brute-force attack tooling

Topics

#NetBIOS#password guessing#Legion tool#brute force

Community Discussion

No community discussion yet for this question.

Full GPEN Practice