PT0-002 · Question #213
A penetration tester has found indicators that a privileged user's password might be the same on 30 different Linux systems. Which of the following tools can help the tester identify the number of…
The correct answer is A. Hydra. Hydra is the most suitable tool to identify on which of 30 Linux systems a suspected privileged user password can be used.
Question
A penetration tester has found indicators that a privileged user's password might be the same on 30 different Linux systems. Which of the following tools can help the tester identify the number of systems on which the password can be used?
Options
- AHydra
- BJohn the Ripper
- CCain and Abel
- DMedusa
How the community answered
(35 responses)- A94% (33)
- B3% (1)
- D3% (1)
Why each option
Hydra is the most suitable tool to identify on which of 30 Linux systems a suspected privileged user password can be used.
Hydra is a powerful, parallelized login cracker that supports a multitude of protocols for online brute-force and dictionary attacks against remote services. It is specifically designed to efficiently test a list of usernames and passwords against multiple hosts, making it ideal for determining how many Linux systems are vulnerable to a suspected password.
John the Ripper is primarily an offline password cracker used for auditing password hashes obtained from files, not for online attacks against remote systems.
Cain and Abel is a password recovery tool specifically designed for Microsoft Windows operating systems, making it unsuitable for Linux systems.
While Medusa is also an online brute-force cracking tool similar to Hydra, Hydra is widely recognized for its extensive protocol support and widespread use, making it the more commonly chosen and robust option for this specific scenario among the given choices.
Concept tested: Online password cracking, brute-force tools
Source: https://github.com/vanhauser-thc/thc-hydra
Topics
Community Discussion
No community discussion yet for this question.