nerdexam
GIAC

GSLC · Question #122

Brutus is a password cracking tool that can be used to crack the following authentications: - HTTP (Basic Authentication) - HTTP (HTML Form/CGI) - POP3 (Post Office Protocol v3) - FTP (File Transfer…

The correct answer is A. Dictionary attack B. Hybrid attack D. Brute force attack. Brutus is a remote password auditing tool that supports dictionary, hybrid, and brute force attacks against various network protocols. It does not perform network-level attacks like man-in-the-middle or replay.

Security Operations & Incident Response Leadership

Question

Brutus is a password cracking tool that can be used to crack the following authentications:

  • HTTP (Basic Authentication)
  • HTTP (HTML Form/CGI)
  • POP3 (Post Office Protocol v3)
  • FTP (File Transfer Protocol)
  • SMB (Server Message Block)
  • Telnet

Which of the following attacks can be performed by Brutus for password cracking? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ADictionary attack
  • BHybrid attack
  • CMan-in-the-middle attack
  • DBrute force attack
  • EReplay attack

How the community answered

(39 responses)
  • A
    87% (34)
  • C
    8% (3)
  • E
    5% (2)

Why each option

Brutus is a remote password auditing tool that supports dictionary, hybrid, and brute force attacks against various network protocols. It does not perform network-level attacks like man-in-the-middle or replay.

ADictionary attackCorrect

A dictionary attack uses a predefined list of common words and passwords to attempt authentication, which Brutus supports across all its target protocols.

BHybrid attackCorrect

A hybrid attack combines dictionary words with appended or substituted characters to crack passwords, and Brutus supports this method to increase cracking success rates beyond pure dictionary attempts.

CMan-in-the-middle attack

A man-in-the-middle attack intercepts network communications between two parties - this is a network interception technique, not a password guessing method, and is not a function of Brutus.

DBrute force attackCorrect

A brute force attack systematically tries every possible character combination until the correct password is found, which is a core function of Brutus for all supported protocols including HTTP, FTP, and SMB.

EReplay attack

A replay attack involves capturing and retransmitting valid authentication tokens - this is a network-level protocol attack that Brutus does not perform, as it focuses exclusively on direct credential guessing.

Concept tested: Brutus password cracking tool attack types

Topics

#password cracking#dictionary attack#brute force#hybrid attack

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GSLC Practice