GPEN · Question #66
Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary attack?
The correct answer is C. Nessus. Nessus is a vulnerability scanner with built-in capability to invoke Hydra for dictionary-based authentication attacks against discovered services.
Question
Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary attack?
Options
- AWhishker
- BNmap
- CNessus
- DSARA
How the community answered
(26 responses)- A4% (1)
- B12% (3)
- C81% (21)
- D4% (1)
Why each option
Nessus is a vulnerability scanner with built-in capability to invoke Hydra for dictionary-based authentication attacks against discovered services.
Whisker is a CGI script vulnerability scanner focused on enumerating web server scripts and does not integrate with Hydra for dictionary attacks.
Nmap is a network port and service discovery tool, not a vulnerability scanner that launches dictionary attacks via Hydra.
Nessus, developed by Tenable, is a comprehensive vulnerability scanner that can call external tools such as Hydra to perform dictionary attacks against network authentication services it identifies during a scan. This integration extends Nessus beyond passive checks into active credential testing, making it uniquely match the description in the question.
SARA (Security Auditor's Research Assistant) is a network vulnerability assessment tool but lacks built-in functionality to invoke Hydra for dictionary attacks.
Concept tested: Nessus vulnerability scanner Hydra dictionary attack integration
Source: https://docs.tenable.com/nessus/
Topics
Community Discussion
No community discussion yet for this question.