nerdexam
GIAC

GSLC · Question #230

Which of the following attacks can be performed by Brutus for cracking a password? Each correct answer represents a complete solution. Choose two.

The correct answer is A. Hybrid attack C. Brute force attack. Brutus is a remote password cracking tool that supports brute force and hybrid attack modes, but does not perform network-level protocol attacks such as replay or man-in-the-middle.

Security Operations & Incident Response Leadership

Question

Which of the following attacks can be performed by Brutus for cracking a password? Each correct answer represents a complete solution. Choose two.

Options

  • AHybrid attack
  • BReplay attack
  • CBrute force attack
  • DMan-in-the-middle attack

How the community answered

(46 responses)
  • A
    91% (42)
  • B
    7% (3)
  • D
    2% (1)

Why each option

Brutus is a remote password cracking tool that supports brute force and hybrid attack modes, but does not perform network-level protocol attacks such as replay or man-in-the-middle.

AHybrid attackCorrect

Brutus supports hybrid attacks, which combine dictionary words with character mutations, number appending, or symbol substitution to crack passwords that are slight variations of common words, extending coverage beyond a pure dictionary list.

BReplay attack

A replay attack captures and retransmits valid authentication tokens or session packets on the network - this is a network protocol-level technique entirely outside the scope of a credential-cracking tool like Brutus.

CBrute force attackCorrect

Brutus supports brute force attacks, which systematically try every possible character combination within a defined character set and length until the correct password is found - this is one of Brutus's core and most recognized attack modes.

DMan-in-the-middle attack

A man-in-the-middle attack intercepts and potentially alters communications between two parties on a network - this is a network interception technique that Brutus, a password cracker, does not perform.

Concept tested: Brutus tool supported password cracking attack methods

Source: https://owasp.org/www-community/attacks/Brute_force_attack

Topics

#password cracking#brute force attack#hybrid attack#Brutus tool

Community Discussion

No community discussion yet for this question.

Full GSLC Practice