A penetration tester wants to verify whether passwords from a leaked password list can be used to access an SSH server as a legitimate user. Which of the following is the most appropriate tool for…

The correct answer is D. Hydra. This tool is designed to perform credential guessing attacks against network services, including SSH, making it appropriate for testing a leaked password list against valid SSH usernames.

Submitted by brentm· Mar 6, 2026Attacks and Exploits

Question

A penetration tester wants to verify whether passwords from a leaked password list can be used to access an SSH server as a legitimate user. Which of the following is the most appropriate tool for this task?

Options

ABloodHound
BResponder
CBurp Suite
DHydra

How the community answered

(33 responses)

B
3% (1)
C
6% (2)
D
91% (30)

Explanation

This tool is designed to perform credential guessing attacks against network services, including SSH, making it appropriate for testing a leaked password list against valid SSH usernames.

Topics

#password cracking#SSH attacks#brute-force#Hydra

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice