SY0-501 · Question #412
A hacker has a packet capture that contains: ....Joe Smith.........E289F21CD33E4F57890DDEA5CF267ED2.. ...Jane.Doe...........AD1FAB10D33E4F57890DDEA5CF267ED2…
The correct answer is A. Password cracker. The provided packet capture contains usernames alongside long alphanumeric strings resembling password hashes. A hacker would use a password cracker to attempt to decrypt these hashes to obtain the plaintext passwords.
Question
A hacker has a packet capture that contains:
....Joe Smith.........E289F21CD33E4F57890DDEA5CF267ED2.. ...Jane.Doe...........AD1FAB10D33E4F57890DDEA5CF267ED2.. ....John.Key..........3374E9E7E33E4F57890DDEA5CF267ED2.. Which of the following tools will the hacker use against this type of capture?
Options
- APassword cracker
- BVulnerability scanner
- CDLP scanner
- DFuzzer
How the community answered
(40 responses)- A75% (30)
- B15% (6)
- C8% (3)
- D3% (1)
Why each option
The provided packet capture contains usernames alongside long alphanumeric strings resembling password hashes. A hacker would use a password cracker to attempt to decrypt these hashes to obtain the plaintext passwords.
The alphanumeric strings associated with the usernames are indicative of password hashes. A password cracker is a specialized tool designed to take these hashes and attempt to determine the original plaintext passwords through various techniques like brute-force, dictionary attacks, or rainbow tables, which is precisely what a hacker would do with this type of captured data.
A vulnerability scanner identifies security weaknesses and misconfigurations in systems, but it does not directly process or crack captured password hashes.
A DLP scanner is used to prevent sensitive data from leaving an organization, not to decrypt or crack captured password hashes.
A fuzzer is used to discover software bugs by sending malformed or unexpected inputs to a program, which is unrelated to cracking captured password hashes.
Concept tested: Password hash cracking tools and techniques
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/security-best-practices-for-passwords#password-storage-and-attack-methods
Topics
Community Discussion
No community discussion yet for this question.