Password Attacks - EH-04-P1

Question 1

A tool that supports many remote protocols and web format logins
it continously attacks while the server sends an access denied response
basic flags include:
-I [user name]
-P [path to wordlist] [IP]:[Port]

Answer 1

Hydra

Question 2

creates a wordlist based on words victims may use
Social engineering on the victim may help the attacker build the list
The victim may use an easy-to-remember password based on personal information

Answer 2

Cupp

Question 3

was originally CPU-based

takes advantage of CPU

Answer 3

John the Ripper

Question 4

Uses Brute-force to crack RAR, PDF, and ZIP files
It creates or uses a wordlist file for its cracking attempts

Rar2john [filedname] > hast.txt
Zip2John [filename] > hash.txt

Answer 4

Rar2John

Question 5

A thread-based remote authentication cracking tool
Supports parallel connections
Supports the same protocols as Hydra but operates more slowly

Answer 5

Medusa

Question 6

Cross-platform tool claimed to be the fastest password cracking utility
supports both CPU and GPU

Answer 6

HashCat

Question 7

The fastest and most
reliable tool for remote
authentication

Answer 7

Ncrack