1.2 Password Attacks

Question 1

Spraying/Password Spraying

Answer 1

Hey technique used by attackers to gain unauthorized access to a user’s account by systematically attempting a few commonly used passwords against many usernames.

Question 2

Dictionary Attack

Answer 2

A type of password attack where an attacker uses a pre-compiled list of potential passwords to systematically guess login credentials.

Question 3

Brute Force (offline)

Answer 3

Refers to an attempt to guess a password or encryption key by systematically trying all possible combinations typically without direct interaction with the target system or service. Offline dedicates that the attacker has obtained a copy of password hash or encrypted data from the target system performing the attack on their own without needing to communicate with the system.

Question 4

Brute Force (online)

Answer 4

A method where an attacker systematically attempts to guess a user’s password by trying different combinations directly on a target system or service such as a website or online application.

Question 5

Rainbow table

Answer 5

A pre-computed table used in cryptographic attacks including password cracking.