Ch4 EH Brute-Force

What is true about Hashing? (2 answers)

What tool is a common password generator that creates passwords based on length and charsets?

What is a cross-platform tool claiming to be the fastest password cracking utility?

GPU cracking is done on graphic cards that support CUDA or OpenCL.

What attacks are the most common and easiest attack to perform on a hashed password or login service?

What is a much-improved version of JtR that also does GPU-based computation?

Hashing algorithms do not perform additional mathematical operations on a password before saving it to the disk.

A combination of prime factorization and modulation renders a hash function irreversible.

The MD5 hash algorithm is considered secure.

Sixteen-digit passwords, once considered secure, are easily cracked today

What is a personalized dictionary creation tool written in Python?

rar2john is an online tool used to crack what?

What can run checks of passwords against large collections in a matter of milliseconds & use powerful dedicated servers?

The cracking speed of a password can be impacted by what? (2 answers)

What is true about Rainbow tables? (2 answers)

What attacks are the most common against online services (SSH, RDP, & FTP logins) and include pseudo-random numbers?

Passwords are strings of characters used to what?

If you need to create a dictionary based on the site’s content, what tool would you use?

What is not true about Ncrack?

Which example of hashing uses salting and timestamps to prevent PTH?

What method of attack is the slowest method?

A value's hash will always be the same as long as the same algorithm is used, no matter the platform.

What Linux tool that supports various attack options, including hybrid attacks?

What are the main weaknesses of hash algorithms? (2 answers)

Getting a user to reveal a password via a phony website requires much less effort than trying to crack it.

A complex password includes all but what?

Fail2Ban acts as an IPS that examines system logs and failed login attempts.

What is true about Default Passwords? (2 answers)

Rar2john can be combined with brute-force to crack what type of files? (3 answers)

What Brute-Force cracking tools are used for parallel connections and use wordlists? (2 answers)

Limiting the number of consecutive login attempts is a poor defense against remote attacks.