PT0-002 · Question #497
A penetration tester discovers a login page during an assessment. Which of the following tools would the tester use to brute force a password?
The correct answer is A. Hydra. To brute force passwords on a login page during an assessment, a penetration tester would use THC Hydra, a dedicated tool for dictionary and brute-force attacks.
Question
A penetration tester discovers a login page during an assessment. Which of the following tools would the tester use to brute force a password?
Options
- AHydra
- BWireshark
- CSQLmap
- DTinEye
How the community answered
(49 responses)- A92% (45)
- B4% (2)
- C2% (1)
- D2% (1)
Why each option
To brute force passwords on a login page during an assessment, a penetration tester would use THC Hydra, a dedicated tool for dictionary and brute-force attacks.
Hydra (THC Hydra) is a powerful and widely used network login cracker specifically designed for performing dictionary attacks and brute-forcing passwords across various authentication protocols, including HTTP forms found on login pages. It automates the process of trying numerous username and password combinations until a valid credential set is found.
Wireshark is a network protocol analyzer used for capturing and inspecting network traffic, not for brute-forcing passwords.
SQLmap is an open-source tool for automating the detection and exploitation of SQL injection vulnerabilities, not for brute-forcing login forms.
TinEye is a reverse image search engine that finds where an image appears online; it has no functionality related to brute-forcing login credentials.
Concept tested: Password brute-forcing tools
Source: https://github.com/vanhauser-thc/thc-hydra/blob/master/README
Topics
Community Discussion
No community discussion yet for this question.