During an assessment, a penetration tester obtains a list of password digests using Responder. Which of the following tools would the penetration tester most likely use next?

Responder is used to capture password hashes (digests) via LLMNR, NBT-NS, and mDNS poisoning. Once these hashes are obtained, Hashcat is the go-to tool for cracking them using various techniques like brute-force, dictionary attacks, or hybrid attacks, to recover the original cleartext passwords.

Hydra is a fast network login cracker that performs brute-force attacks against login services (e.g., SSH, FTP, HTTP), but it's used for online password guessing, not for cracking obtained hashes.

CeWL (Custom Word List generator) is used to crawl websites to generate custom wordlists for dictionary attacks, but it does not perform hash cracking itself.

Medusa is a brute-force parallel login cracker, similar to Hydra, used for online password guessing against various services, not for offline hash cracking.