nerdexam
GIAC

GPEN · Question #28

Which of the following tools can be used for cracking the password of Server Message Block (SMB)? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is B. SMBRelay D. L0phtCrack. SMBRelay and L0phtCrack are both capable of compromising SMB credentials - SMBRelay by intercepting NTLM handshakes and L0phtCrack by cracking captured LM/NTLM hashes.

Exploitation & Post-Exploitation Techniques

Question

Which of the following tools can be used for cracking the password of Server Message Block (SMB)? Each correct answer represents a complete solution. Choose all that apply.

Options

  • APwddump2
  • BSMBRelay
  • CKrbCrack
  • DL0phtCrack

How the community answered

(30 responses)
  • A
    17% (5)
  • B
    77% (23)
  • C
    7% (2)

Why each option

SMBRelay and L0phtCrack are both capable of compromising SMB credentials - SMBRelay by intercepting NTLM handshakes and L0phtCrack by cracking captured LM/NTLM hashes.

APwddump2

Pwddump2 extracts password hashes directly from the local Windows SAM database and is not a tool for attacking or cracking SMB network authentication sessions.

BSMBRelayCorrect

SMBRelay is a tool that intercepts SMB NTLM challenge-response authentication handshakes in transit, allowing an attacker to either relay those credentials to another SMB server or capture them for offline cracking - directly targeting SMB authentication.

CKrbCrack

KrbCrack targets Kerberos ticket-based authentication, not the NTLM-based challenge-response mechanism used by SMB.

DL0phtCrackCorrect

L0phtCrack is a password auditing and recovery tool that cracks Windows LM and NTLM password hashes, including those extracted from SMB authentication captures, using dictionary, brute-force, and hybrid attack methods.

Concept tested: SMB authentication cracking and relay tools

Topics

#SMB cracking#SMBRelay#L0phtCrack#password attacks

Community Discussion

No community discussion yet for this question.

Full GPEN Practice