nerdexam
CompTIA

PT0-002 · Question #490

A company recruited a penetration tester to brute force an SSH password on a server. The tester would like to use THC Hydra to perform the attack and remember the use of the -t option. Which of the…

The correct answer is A. The number of connects in parallel per target. When using THC Hydra for brute-forcing, the -t option controls the number of parallel connections or tasks that run concurrently against each individual target server.

Attacks and Exploits

Question

A company recruited a penetration tester to brute force an SSH password on a server. The tester would like to use THC Hydra to perform the attack and remember the use of the -t option. Which of the following should be considered when using this option?

Options

  • AThe number of connects in parallel per target
  • BThe number of task connects in parallel overall
  • CThe waiting time for a response between connects per threads
  • DIf the output shows log-ins and passwords for each attempt

How the community answered

(31 responses)
  • A
    87% (27)
  • B
    6% (2)
  • C
    3% (1)
  • D
    3% (1)

Why each option

When using THC Hydra for brute-forcing, the `-t` option controls the number of parallel connections or tasks that run concurrently against each individual target server.

AThe number of connects in parallel per targetCorrect

In THC Hydra, the `-t` (or `--tasks`) option is specifically designed to control the number of parallel connection attempts or tasks that Hydra will execute simultaneously *per target*. This is crucial for managing the load on the target server and avoiding detection or overwhelming its services.

BThe number of task connects in parallel overall

The `-t` option in Hydra controls parallel tasks per target, not the total number of tasks in parallel across all targets globally.

CThe waiting time for a response between connects per threads

The `-t` option does not control the waiting time between connections; other options or system-level network settings would typically handle such delays.

DIf the output shows log-ins and passwords for each attempt

The `-t` option configures task concurrency and has no bearing on whether the output displays login attempts or credentials, which is usually controlled by verbose or debug output settings.

Concept tested: THC Hydra usage - parallel connections

Source: https://github.com/vanhauser-thc/thc-hydra/blob/master/README

Topics

#THC Hydra#Brute-force attack#SSH#Penetration testing tools

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PT0-002 Practice