During a security assessment, a penetration tester wants to compromise user accounts without triggering IDS/IPS detection rules. Which of the following is the most effective way for the tester to…

The correct answer is A. Crack user accounts using compromised hashes. To avoid triggering IDS/IPS alerts, the attacker should use offline cracking on compromised hashes rather than direct brute-force attempts. Crack user accounts using compromised hashes: Hashes can be cracked offline using tools like Hashcat or John the Ripper. No direct login…

Submitted by femi9· Mar 6, 2026Attacks and Exploits

Question

During a security assessment, a penetration tester wants to compromise user accounts without triggering IDS/IPS detection rules. Which of the following is the most effective way for the tester to accomplish this task?

Options

ACrack user accounts using compromised hashes.
BBrute force accounts using a dictionary attack.
CBypass authentication using SQL injection.
DCompromise user accounts using an XSS attack.

How the community answered

(46 responses)

A
74% (34)
B
9% (4)
C
13% (6)
D
4% (2)

Explanation

To avoid triggering IDS/IPS alerts, the attacker should use offline cracking on compromised hashes rather than direct brute-force attempts. Crack user accounts using compromised hashes: Hashes can be cracked offline using tools like Hashcat or John the Ripper. No direct login attempts, avoiding detection by security systems.

Topics

#hash cracking#credential compromise#IDS/IPS evasion

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice