CompTIA
PT0-003 · Question #234
A penetration tester is preparing a password-spraying attack against a known list of users for the company "example." The tester is using the following list of commands: 1. pw-inspector -i $allwords |
The correct answer is D. 3, 5, 1, 4, 2. 3. Set environment variables and file paths 5. Use CeWL to scrape words from the target website to generate a custom wordlist 1. Use pw-inspector to filter the wordlist to meet complexity or length requirements 4. Use spray365 to generate an execution plan using users, domain, an
Submitted by haru.x· Mar 6, 2026Attacks and Exploits
Question
A penetration tester is preparing a password-spraying attack against a known list of users for the company "example." The tester is using the following list of commands: 1. pw-inspector -i $allwords | tee $pass 2. spray365.py spray -ep $plan 3. users="/user.txt"; allwords="/words.txt"; pass="/passwords.txt"; plan="/spray.plan" 4. spray365.py generate --password_file $pass --user file $user --domain "example.com" --execution_plan $plan Which of the following is the correct order for the list of the commands?
Options
- A3, 4, 1, 2, 5
- B3, 1, 2, 5, 4
- C2, 3, 1, 4, 5
- D3, 5, 1, 4, 2
How the community answered
(24 responses)- A4% (1)
- B4% (1)
- C8% (2)
- D83% (20)
Explanation
- Set environment variables and file paths 5. Use CeWL to scrape words from the target website to generate a custom wordlist 1. Use pw-inspector to filter the wordlist to meet complexity or length requirements 4. Use spray365 to generate an execution plan using users, domain, and filtered passwords 2. Execute the password spraying attack using the generated plan
Topics
#Password spraying#Command sequencing#Authentication attacks
Community Discussion
No community discussion yet for this question.