A penetration tester would like to crack a hash using a list of hashes and a predefined set of rules. The tester runs the following command: hashcat.exe -a 0 .\hash.txt .\rockyou.txt -r…

The correct answer is B. Dictionary. The command hashcat.exe -a 0 .\hash.txt .\rockyou.txt -r .\rules\replace.rule indicates that the penetration tester is using a dictionary attack combined with rule-based modifications. The -a 0 option specifies a dictionary attack mode, where .\rockyou.txt is the dictionary…

Attacks and Exploits

Question

A penetration tester would like to crack a hash using a list of hashes and a predefined set of rules. The tester runs the following command:

hashcat.exe -a 0 .\hash.txt .\rockyou.txt -r .\rules\replace.rule Which of the following is the penetration tester using to crack the hash?

Options

AHybrid attack
BDictionary
CRainbow table
DBrute-force method

How the community answered

(40 responses)

A
13% (5)
B
80% (32)
C
3% (1)
D
5% (2)

Explanation

The command hashcat.exe -a 0 .\hash.txt .\rockyou.txt -r .\rules\replace.rule indicates that the penetration tester is using a dictionary attack combined with rule-based modifications. The -a 0 option specifies a dictionary attack mode, where .\rockyou.txt is the dictionary file containing potential passwords, and -r .\rules\replace.rule applies predefined rules to mutate these passwords. This method leverages a known list of potential passwords and augments them with additional variations based on the rules provided.

Topics

#Hash cracking#Hashcat#Dictionary attack#Penetration testing tools

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice