GSLC · Question #230
Which of the following attacks can be performed by Brutus for cracking a password? Each correct answer represents a complete solution. Choose two.
The correct answer is A. Hybrid attack C. Brute force attack. Brutus is a remote password cracking tool that supports brute force and hybrid attack modes, but does not perform network-level protocol attacks such as replay or man-in-the-middle.
Question
Which of the following attacks can be performed by Brutus for cracking a password? Each correct answer represents a complete solution. Choose two.
Options
- AHybrid attack
- BReplay attack
- CBrute force attack
- DMan-in-the-middle attack
How the community answered
(46 responses)- A91% (42)
- B7% (3)
- D2% (1)
Why each option
Brutus is a remote password cracking tool that supports brute force and hybrid attack modes, but does not perform network-level protocol attacks such as replay or man-in-the-middle.
Brutus supports hybrid attacks, which combine dictionary words with character mutations, number appending, or symbol substitution to crack passwords that are slight variations of common words, extending coverage beyond a pure dictionary list.
A replay attack captures and retransmits valid authentication tokens or session packets on the network - this is a network protocol-level technique entirely outside the scope of a credential-cracking tool like Brutus.
Brutus supports brute force attacks, which systematically try every possible character combination within a defined character set and length until the correct password is found - this is one of Brutus's core and most recognized attack modes.
A man-in-the-middle attack intercepts and potentially alters communications between two parties on a network - this is a network interception technique that Brutus, a password cracker, does not perform.
Concept tested: Brutus tool supported password cracking attack methods
Source: https://owasp.org/www-community/attacks/Brute_force_attack
Topics
Community Discussion
No community discussion yet for this question.