A penetration tester wants to test a list of common passwords against the SSH daemon on a network device. Which of the following tools would be BEST to use for this purpose?

The correct answer is A. Hashcat. NOTE: The listed answer (A) appears to be a key error. The correct answer is C - Patator. Patator is a multi-purpose brute-force tool that supports live online attacks against SSH, FTP, HTTP, and other services, making it appropriate for testing a password list against a live…

Attacks and Exploits

Question

Options

AHashcat
BMimikatz
CPatator
DJohn the Ripper

How the community answered

(23 responses)

A
91% (21)
B
4% (1)
C
4% (1)

Explanation

NOTE: The listed answer (A) appears to be a key error. The correct answer is C - Patator. Patator is a multi-purpose brute-force tool that supports live online attacks against SSH, FTP, HTTP, and other services, making it appropriate for testing a password list against a live SSH daemon. Hashcat (A) is an offline password hash cracker - it does not interact with live network services. Mimikatz (B) is a Windows credential dumping tool, not a brute-force utility. John the Ripper (D) is primarily an offline hash cracker. For online brute-forcing of SSH, Patator, Hydra, or Medusa are the correct tools.

Topics

#Password cracking#Brute-force#SSH#Penetration testing tools

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice