GPEN · Question #28
Which of the following tools can be used for cracking the password of Server Message Block (SMB)? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is B. SMBRelay D. L0phtCrack. SMBRelay and L0phtCrack are both capable of compromising SMB credentials - SMBRelay by intercepting NTLM handshakes and L0phtCrack by cracking captured LM/NTLM hashes.
Question
Which of the following tools can be used for cracking the password of Server Message Block (SMB)? Each correct answer represents a complete solution. Choose all that apply.
Options
- APwddump2
- BSMBRelay
- CKrbCrack
- DL0phtCrack
How the community answered
(30 responses)- A17% (5)
- B77% (23)
- C7% (2)
Why each option
SMBRelay and L0phtCrack are both capable of compromising SMB credentials - SMBRelay by intercepting NTLM handshakes and L0phtCrack by cracking captured LM/NTLM hashes.
Pwddump2 extracts password hashes directly from the local Windows SAM database and is not a tool for attacking or cracking SMB network authentication sessions.
SMBRelay is a tool that intercepts SMB NTLM challenge-response authentication handshakes in transit, allowing an attacker to either relay those credentials to another SMB server or capture them for offline cracking - directly targeting SMB authentication.
KrbCrack targets Kerberos ticket-based authentication, not the NTLM-based challenge-response mechanism used by SMB.
L0phtCrack is a password auditing and recovery tool that cracks Windows LM and NTLM password hashes, including those extracted from SMB authentication captures, using dictionary, brute-force, and hybrid attack methods.
Concept tested: SMB authentication cracking and relay tools
Topics
Community Discussion
No community discussion yet for this question.