PT0-001 · Question #207
Which of the following can be used to perform online password attacks against RDP?
The correct answer is D. Ncrack. Online password attacks against live network services like RDP require a tool that sends real-time authentication attempts over the network, which Ncrack is specifically designed to do.
Question
Which of the following can be used to perform online password attacks against RDP?
Options
- AHashcat
- BJohn the Rippef
- CAircrack-ng
- DNcrack
How the community answered
(57 responses)- A2% (1)
- B2% (1)
- C4% (2)
- D93% (53)
Why each option
Online password attacks against live network services like RDP require a tool that sends real-time authentication attempts over the network, which Ncrack is specifically designed to do.
Hashcat is an offline password cracking tool that operates against captured password hashes, not against live network authentication services.
John the Ripper is primarily an offline cracker used on captured hash dumps and does not perform live authentication attempts against network services.
Aircrack-ng is a wireless security suite focused on WEP and WPA key cracking and is not designed to attack wired network services like RDP.
Ncrack is a high-speed network authentication cracking tool that supports protocols including RDP, SSH, FTP, and HTTP by sending live credential attempts directly to the target service. Unlike offline crackers that work against captured hashes, Ncrack interacts with the live service in real time. This makes it the correct choice for online attacks against RDP endpoints.
Concept tested: Online network authentication cracking against RDP
Source: https://nmap.org/ncrack/
Topics
Community Discussion
No community discussion yet for this question.