nerdexam
GIAC

GPEN · Question #420

Which of the following is the feature that separates the use of Rainbow Tables from other applications such as Cain or John the Ripper?

The correct answer is B. Applications take advantage of 64-bit CPU processor and multithread the crackingprocess. Rainbow table tools are distinguished from tools like Cain and John the Ripper by their ability to exploit 64-bit processors and multithreading to accelerate the lookup process.

Exploitation & Post-Exploitation Techniques

Question

Which of the following is the feature that separates the use of Rainbow Tables from other applications such as Cain or John the Ripper?

Options

  • ASalts are used to create massive password databases for comparison.
  • BApplications take advantage of 64-bit CPU processor and multithread the crackingprocess.
  • CData Is aligned efficiently in the rainbow tables making the search process quicker
  • DRaw hashed passwords are compared to pre-calculated hash tables.

How the community answered

(40 responses)
  • A
    10% (4)
  • B
    70% (28)
  • C
    15% (6)
  • D
    5% (2)

Why each option

Rainbow table tools are distinguished from tools like Cain and John the Ripper by their ability to exploit 64-bit processors and multithreading to accelerate the lookup process.

ASalts are used to create massive password databases for comparison.

Salts are specifically designed to defeat rainbow table attacks by making precomputed tables useless, not to build password databases for comparison.

BApplications take advantage of 64-bit CPU processor and multithread the crackingprocess.Correct

Rainbow table applications such as Ophcrack are engineered to take advantage of modern 64-bit CPU architectures and multi-core parallelism to dramatically speed up the chain traversal and reduction function computations inherent in rainbow table lookups. This hardware-optimized parallel execution model sets rainbow table tools apart from tools like Cain and Abel or John the Ripper, which rely primarily on sequential brute-force or dictionary-based hash computation. The result is a fundamentally different performance profile driven by hardware utilization rather than algorithmic guessing.

CData Is aligned efficiently in the rainbow tables making the search process quicker

Efficient data alignment is an internal storage implementation detail of rainbow tables and does not represent the key differentiating feature compared to tools like Cain or John the Ripper.

DRaw hashed passwords are compared to pre-calculated hash tables.

Comparing hashes to precomputed tables is a general description of lookup-based attacks and does not specifically identify the hardware optimization characteristic that separates rainbow table tools from traditional crackers.

Concept tested: Rainbow table hardware-accelerated cracking vs traditional tools

Source: https://owasp.org/www-community/attacks/Password_Cracking

Topics

#rainbow tables#pre-calculated hashes#password cracking#Cain and Abel

Community Discussion

No community discussion yet for this question.

Full GPEN Practice