nerdexam
CompTIA

PT0-003 · Question #116

A penetration tester would like to crack a hash using a list of hashes and a predefined set of rules. The tester runs the following command: hashcat.exe -a 0 .\hash.txt .\rockyou.txt -r…

The correct answer is B. Dictionary. The command hashcat.exe -a 0 .\hash.txt .\rockyou.txt -r .\rules\replace.rule indicates that the penetration tester is using a dictionary attack combined with rule-based modifications. The -a 0 option specifies a dictionary attack mode, where .\rockyou.txt is the dictionary…

Submitted by naveen.iyer· Mar 6, 2026Attacks and Exploits

Question

A penetration tester would like to crack a hash using a list of hashes and a predefined set of rules. The tester runs the following command:

hashcat.exe -a 0 .\hash.txt .\rockyou.txt -r .\rules\replace.rule Which of the following is the penetration tester using to crack the hash?

Options

  • AHybrid attack
  • BDictionary
  • CRainbow table
  • DBrute-force method

How the community answered

(57 responses)
  • A
    7% (4)
  • B
    88% (50)
  • C
    2% (1)
  • D
    4% (2)

Explanation

The command hashcat.exe -a 0 .\hash.txt .\rockyou.txt -r .\rules\replace.rule indicates that the penetration tester is using a dictionary attack combined with rule-based modifications. The -a 0 option specifies a dictionary attack mode, where .\rockyou.txt is the dictionary file containing potential passwords, and -r .\rules\replace.rule applies predefined rules to mutate these passwords. This method leverages a known list of potential passwords and augments them with additional variations based on the rules provided.

Topics

#hash cracking#hashcat#dictionary attack#password attacks

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice