GPEN Password Attacks and Formats — All Questions With Answers

Question 1

Refer to the exhibit. The penetration tester is unable to crack the hash using mode 1800. What is the most likely cause of this failure?

Accepted Answer

The hash mode 1800 is incorrect for a SHA-512 crypt implementation.. The exhibit shows a SHA-512 crypt hash (indicated by the $6$ prefix). Hashcat mode 1800 targets SHA-512 based hashes, but specifically for legacy systems or custom implementations. Modern Linux SHA-512 crypt hashes require mode 1800 to be configured correctly with the specific parameters. Misidentifying the hash format leads to incorrect salt parsing and improper algorithm selection, which are critical errors when attempting to recover secrets from standard Linux password storage files.

Answer

The salt is too short for the algorithm to process.

Answer

The round count is too high for the hardware to process.

Answer

The hash is actually a bcrypt hash which requires mode 3200.

Question 2

Which THREE factors significantly influence the time required to crack a password hash during an offline attack?

Accepted Answer

The length and complexity of the password.. The efficiency of an offline attack is governed by the speed of the hardware, the complexity of the hash function, and the quality of the dictionary or wordlist. Modern GPUs can perform billions of hashes per second, but complex algorithms like bcrypt or Argon2 are designed to be intentionally slow. Balancing these factors is essential for planning an engagement, as it determines whether cracking a specific hash is feasible within the allotted time frame of a test.

Answer

The number of concurrent users on the network.

Answer

The number of open ports on the target server.

Question 3

Refer to the exhibit. Which attack method is most likely to succeed given this password policy?

Accepted Answer

Password spraying across the organization.. The policy has a very strict account lockout of only 3 failed attempts. This effectively makes brute-forcing a single account online nearly impossible. However, the lack of a history check or other limitations might suggest other weaknesses. Spraying is the only viable online option, but the testing focus should shift towards offline cracking or non-password-based techniques, as standard online brute force will trigger an immediate and persistent lockout for the target user.

Answer

Brute-force attack on a single account.

Answer

Dictionary attack on a single account.

Answer

Offline hash cracking of the SAM database.

Question 4

Which hashing algorithm is currently considered the most resistant to brute-force attacks due to its design as a memory-hard function?

Accepted Answer

Argon2. Argon2 is a memory-hard function, meaning it requires significant RAM to compute, in addition to CPU cycles. This design specifically targets the hardware advantage of GPUs and ASICs, which have many cores but limited high-speed memory per core. By forcing the computation to consume large amounts of memory, Argon2 makes it prohibitively expensive to parallelize the cracking process, offering superior protection compared to older algorithms like MD5 or SHA-1.

Answer

MD5

Answer

SHA-1

Answer

DES

Question 5

Refer to the exhibit. What does this hash format indicate about the password for 'user1'?

Accepted Answer

The password is empty (null).. The exhibit shows a standard Windows SAM file format. The first part is the LM hash, and the second is the NTLM hash. The specific strings 'aad3b...' and '31d6c...' are the universal indicators for an empty or null password. In a penetration testing context, identifying these null hashes is a quick win, as it reveals accounts that have no password protection, allowing for immediate access without needing to run any cracking tools.

Answer

The password is 'password'.

Answer

The password has been recently changed.

Answer

The account is locked and cannot be used.

Question 6

A penetration tester has extracted a set of password hashes from a compromised Linux system's `/etc/shadow` file. The hashes are in the format `$6$rounds=5000$salt$hash`. Which TWO of the following statements are true regarding the cracking of these hashes? (Choose two.)

Accepted Answer

The hashes use SHA-512 with 5000 rounds of key stretching, which slows down brute-force attacks.. The hashes use SHA-512 crypt with a specified number of rounds (5000) and a salt. Key stretching via multiple rounds increases the computational cost per guess, slowing down brute-force attacks. The rounds parameter is configurable and can be increased beyond the default to further hinder cracking. Salted hashes are not vulnerable to generic rainbow tables. Thus, the true statements are that the hashes use SHA-512 with 5000 rounds of key stretching, and that the number of rounds can be increased to further slow cracking.

Answer

These hashes are unsalted, making them vulnerable to precomputed hash attacks.

Answer

The hashes can be cracked using Hashcat mode 1800 without any additional parameters.

Answer

The salt is fixed and known, so rainbow tables can be used to crack these hashes instantly.

Question 7

A penetration tester is preparing to crack a set of NTLM hashes obtained from a Windows domain controller. The hashes are unsalted and the passwords are suspected to be of moderate complexity. Which two techniques would be most effective for rapidly identifying weak passwords while minimizing computational resources? (Choose two.)

Accepted Answer

Dictionary attack with common password lists and mangling rules.. Rainbow tables and dictionary attacks with rules are both highly efficient for unsalted NTLM hashes. Rainbow tables trade storage for speed, allowing instant lookup of precomputed hashes. Dictionary attacks with rules leverage common password patterns and are computationally cheap. Together, they quickly identify weak passwords without the enormous resource expenditure of brute-force or massive precomputation. They are the most effective and resource-conscious choices.

Answer

Precomputed hash tables for all possible 8-character passwords.

Answer

Hybrid attack combining a wordlist with a mask for appended digits.

Answer

Brute-force attack using the full NTLM character set up to 12 characters.

Question 8

A penetration tester extracts a password hash from a database that starts with $2y$10$. Which statement correctly identifies the algorithm and a key characteristic?

Accepted Answer

It is a bcrypt hash, and the cost factor is 10, meaning 2^10 iterations.. The $2y$ prefix identifies the hash as bcrypt, and the following number is the cost factor (log2 of iterations). A cost of 10 means 2^10 = 1024 iterations. Bcrypt is a deliberate slow hashing algorithm used to protect passwords. Other prefixes like $6$ for SHA-512 crypt, $1$ for MD5 crypt, and $7$ for scrypt are different. Correct identification is crucial for selecting the right cracking mode and understanding the computational effort required.

Answer

It is a SHA-512 crypt hash, and the number 10 is the salt length.

Answer

It is an MD5 crypt hash, and the number 10 is the iteration count.

Answer

It is a scrypt hash, and the number 10 is the memory cost parameter.

Question 9

You are performing an offline attack against a password hash stored in an NTDS.dit file. You have successfully dumped the hashes using secretsdump.py. Given the format 'Username:RID:LMHash:NTHash:::', which hash should be targeted for a modern Windows environment to maximize cracking efficiency?

Accepted Answer

The NTHash, because it is the primary hash used by NTLM authentication.. Modern Windows systems prioritize NTLM authentication, which relies on the NTHash. The LM hash is deprecated, weak, and often stored as a null value or a fixed constant in modern systems. Targeting the NTHash allows for pass-the-hash attacks or brute-force attempts that align with the underlying authentication protocol. Understanding the structure of these hashes is crucial for penetration testers to select the correct dictionary or mask attack strategies during local account auditing.

Answer

The LMHash, because it is shorter and faster to calculate.

Answer

The RID, because it provides the unique identifier for the account.

Answer

The entire string, including the colons, to ensure format integrity.

Question 10

Which TWO of the following password cracking techniques are considered 'offline' attacks?

Accepted Answer

Running a dictionary attack against a SAM database file.. Offline attacks involve obtaining a copy of the password hashes and processing them on the attacker's own hardware. This is stealthy as it avoids account lockout policies and audit logging generated by failed login attempts on the target system. Understanding the distinction between online and offline attacks is vital for penetration testers to choose methods that minimize detection while maximizing the probability of successful credential recovery within a controlled and limited engagement timeframe.

Answer

Brute-forcing an SSH service via an internet-facing portal.

Answer

Spraying common passwords against an O365 login portal.

Answer

Phishing users to submit credentials into a fake form.

Question 11

What is the primary security advantage of utilizing salts in password hashing?

Accepted Answer

It prevents the use of precomputed rainbow tables.. Salts are random strings added to passwords before they are hashed. This ensures that even if two users have the same password, their resulting hashes will be different. This prevents the use of precomputed lookup tables (rainbow tables) from successfully identifying passwords. Protecting against rainbow tables is a fundamental security practice that forces attackers to crack each hash individually, significantly increasing the time and computational resources required for a successful breach.

Answer

It increases the length of the password, making it harder to guess.

Answer

It forces the hashing algorithm to use more CPU cycles.

Answer

It encrypts the password instead of hashing it.

Question 12

Which attack type is most effective when an attacker has a list of usernames and a single password that they believe might be reused across multiple accounts?

Accepted Answer

Password spraying. Password spraying is a technique where an attacker tests a single password against many accounts to avoid triggering account lockout thresholds that occur with brute-forcing a single account. By keeping the number of attempts per account low, the attacker remains under the radar of security monitoring systems. This is a common tactic in modern cloud environments where individual account lockout policies are strict, making mass authentication attempts the most viable entry vector.

Answer

Dictionary attack

Answer

Birthday attack

Answer

Rainbow table attack

Question 13

What is the main risk associated with storing cleartext credentials in environment variables or configuration files?

Accepted Answer

They can be read by any user or process with sufficient file permissions.. Cleartext credentials are easily accessible to anyone with local read access. In a penetration test, finding these files is a 'low-hanging fruit' that often leads to privilege escalation or lateral movement. Many applications inadvertently store sensitive data in logs, config files, or scripts, creating a security debt that attackers exploit to gain unauthorized access without needing to crack passwords through time-consuming cryptographic analysis of captured hashes.

Answer

They are susceptible to rainbow table attacks.

Answer

They prevent the use of multi-factor authentication.

Answer

They automatically trigger account lockouts after one reading.

Question 14

What is the primary function of 'rules' in tools like Hashcat when performing a dictionary attack?

Accepted Answer

To transform dictionary words into common password variations.. Rules are used to transform wordlist entries into variations. For example, a rule might take the word 'password' and generate 'Password123!' or 'P@ssw0rd'. This increases the effectiveness of dictionary attacks by covering common variations that users employ to meet complexity requirements, without needing a massive, exhaustive dictionary. This is a critical skill for testers to maximize the utility of limited wordlist sizes while increasing the likelihood of cracking complex, user-chosen passwords.

Answer

To decrypt the hash using the specified algorithm.

Answer

To automatically update the hashing algorithm to a newer standard.

Answer

To bypass account lockout mechanisms on the target system.

Question 15

Which TWO of the following are characteristics of 'Salted' hashes compared to 'Unsalted' hashes?

Accepted Answer

They prevent the identification of identical passwords.. Salted hashes introduce a unique, random string to the hashing process for every user, ensuring that identical passwords result in different hashes. This makes it impossible to use global rainbow tables. Unsalted hashes are inherently vulnerable to these tables, as the same plaintext always produces the same hash, allowing for near-instant cracking of common passwords across an entire database once a single table is computed.

Answer

They enable the use of rainbow tables.

Answer

They are inherently faster to crack than unsalted hashes.

Answer

They are usually stored in cleartext in the configuration file.

Question 16

When performing a penetration test, why is it safer to crack hashes offline rather than online?

Accepted Answer

Offline cracking prevents account lockouts.. Offline cracking is performed on the tester's own hardware, which means there is no network traffic generated towards the target system. This prevents the triggering of intrusion detection systems (IDS), account lockout policies, or audit logs that monitor failed authentication attempts. It provides a stealthy way to test password strength without risking operational disruption or alerting the client's defensive security team, which is the primary concern during a professional assessment.

Answer

Offline cracking is always faster than online methods.

Answer

Offline cracking allows for the use of more complex passwords.

Answer

Offline cracking is required to obtain the hash from memory.

Question 17

A penetration tester has obtained a password hash from a Windows system: `aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0`. They attempt to crack it using Hashcat with mode 1000 but are unable to recover any plaintext. What is the most likely explanation for this failure?

Accepted Answer

The LM hash is empty, and the NT hash corresponds to a blank password.. The hash consists of an LM part and an NT part separated by a colon. The LM part `aad3b435b51404eeaad3b435b51404ee` is the constant for an empty LM hash, and the NT part `31d6cfe0d16ae931b73c59d7e0c089c0` is the NT hash of an empty password. Hashcat mode 1000 correctly handles NTLM, but since the password is blank, cracking yields an empty string, which may not be displayed. Thus, the failure is due to the password being blank, not a mode or salt issue.

Answer

The hash is a domain cached credential and requires mode 2100.

Answer

The hash is salted, and Hashcat mode 1000 does not support salts.

Answer

The hash was captured from a Kerberos ticket and requires mode 13100.

Question 18

A penetration tester has obtained a hash from a Linux system's /etc/shadow file: $6$rounds=656000$XyZ123$... The tester wants to crack this hash using John the Ripper. Which format should be specified to John to ensure correct cracking?

Accepted Answer

--format=sha512crypt. The hash begins with $6$, which is the identifier for SHA-512 crypt. John the Ripper's format for this is sha512crypt. The other formats correspond to different algorithms (bcrypt, md5crypt, descrypt) that do not match the $6$ prefix. Therefore, specifying sha512crypt is necessary for successful cracking.

Answer

--format=bcrypt

Answer

--format=md5crypt

Answer

--format=descrypt

Question 19

During a penetration test, you capture network traffic and obtain an MS-CHAPv2 challenge-response handshake. You want to crack it offline to recover the user's password. Which tool and mode combination is most appropriate for this task?

Accepted Answer

Hashcat mode 5600 (MS-CHAPv2) with a wordlist.. MS-CHAPv2 challenge-response handshakes are cracked using Hashcat mode 5600 or John the Ripper's mschapv2 format. Hashcat mode 5600 correctly processes the challenge and response to recover the password. Other modes like 5500 are for different protocols (NetNTLMv1), and tools like Aircrack-ng are for Wi-Fi. Thus, the appropriate combination is Hashcat mode 5600 with a wordlist.

Answer

Hashcat mode 5500 (NetNTLMv1) with a wordlist.

Answer

Aircrack-ng with the `-E` option for MS-CHAPv2.

Answer

John the Ripper with the `--format=netntlm` option.

Question 20

During a penetration test against an Active Directory environment, you extract the NTLM hash of a domain user from a memory dump. You attempt to crack it with Hashcat using mode 1000 but fail after several hours. You suspect the password is longer than 12 characters and contains symbols. Which adjustment to your cracking strategy is most likely to succeed within a reasonable timeframe?

Accepted Answer

Use a mask attack with a custom charset targeting the estimated length and character set.. The password is suspected to be long and complex, so a targeted mask attack that specifies the exact length and character set is the most efficient use of cracking resources. Rule-based and combinator attacks rely on existing wordlists and transformations, which may not cover the required length and symbol diversity. Rainbow tables are infeasible for such a large keyspace. Thus, the mask attack is the best choice.

Answer

Switch to a rule-based attack using the best64.rule with a large wordlist.

Answer

Utilize a rainbow table specific to NTLM hashes.

Answer

Perform a combinator attack using two separate wordlists of common passwords.

GPEN Password Attacks and Formats — All Questions With Answers

Refer to the exhibit. The penetration tester is unable to crack the hash using mode 1800. What is the most likely cause of this failure?

Exhibit

Which THREE factors significantly influence the time required to crack a password hash during an offline attack?

Refer to the exhibit. Which attack method is most likely to succeed given this password policy?

Exhibit

Which hashing algorithm is currently considered the most resistant to brute-force attacks due to its design as a memory-hard function?

Refer to the exhibit. What does this hash format indicate about the password for 'user1'?

Exhibit

A penetration tester has extracted a set of password hashes from a compromised Linux system's `/etc/shadow` file. The hashes are in the format `$6$rounds=5000$salt$hash`. Which TWO of the following statements are true regarding the cracking of these hashes? (Choose two.)

A penetration tester extracts a password hash from a database that starts with $2y$10$. Which statement correctly identifies the algorithm and a key characteristic?

You are performing an offline attack against a password hash stored in an NTDS.dit file. You have successfully dumped the hashes using secretsdump.py. Given the format 'Username:RID:LMHash:NTHash:::', which hash should be targeted for a modern Windows environment to maximize cracking efficiency?

Which TWO of the following password cracking techniques are considered 'offline' attacks?

What is the primary security advantage of utilizing salts in password hashing?

Which attack type is most effective when an attacker has a list of usernames and a single password that they believe might be reused across multiple accounts?

What is the main risk associated with storing cleartext credentials in environment variables or configuration files?

What is the primary function of 'rules' in tools like Hashcat when performing a dictionary attack?

Which TWO of the following are characteristics of 'Salted' hashes compared to 'Unsalted' hashes?

When performing a penetration test, why is it safer to crack hashes offline rather than online?

A penetration tester has obtained a password hash from a Windows system: `aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0`. They attempt to crack it using Hashcat with mode 1000 but are unable to recover any plaintext. What is the most likely explanation for this failure?

A penetration tester has obtained a hash from a Linux system's /etc/shadow file: $6$rounds=656000$XyZ123$... The tester wants to crack this hash using John the Ripper. Which format should be specified to John to ensure correct cracking?

During a penetration test, you capture network traffic and obtain an MS-CHAPv2 challenge-response handshake. You want to crack it offline to recover the user's password. Which tool and mode combination is most appropriate for this task?

A penetration tester obtains a password hash from a Linux system's /etc/shadow file that begins with $6$. Which statement correctly describes this hash and its implications for cracking?

During an internal penetration test, you capture an NTLMv2 challenge-response pair using Responder. You want to crack it offline to obtain the user's password. Which Hashcat mode should you use?

A penetration tester extracts a password hash from a compromised Linux system. The hash format is `$6$rounds=5000$abcdefgh$...`. Which hashing algorithm and configuration does this represent?

A penetration tester has obtained a set of NTLM hashes from a Windows domain controller. The tester plans to perform an offline password cracking attack. Which two of the following techniques are most effective for increasing the success rate of cracking these hashes? (Choose two.)

A penetration tester is analyzing a password hash captured from a web application's database. The hash is `5f4dcc3b5aa765d61d8327deb882cf99` and is 32 characters long. Which type of hash is this, and what is a common tool to crack it?

A penetration tester has obtained a hash from a Linux system: `$1$salt$hash`. The tester wants to crack it using John the Ripper. Which format should be specified, and what is the main weakness of this hash type?

GPEN Password Attacks and Formats — All Questions With Answers

Refer to the exhibit. The penetration tester is unable to crack the hash using mode 1800. What is the most likely cause of this failure?

Exhibit

Which THREE factors significantly influence the time required to crack a password hash during an offline attack?

Refer to the exhibit. Which attack method is most likely to succeed given this password policy?

Exhibit

Which hashing algorithm is currently considered the most resistant to brute-force attacks due to its design as a memory-hard function?

Refer to the exhibit. What does this hash format indicate about the password for 'user1'?

Exhibit

A penetration tester has extracted a set of password hashes from a compromised Linux system's `/etc/shadow` file. The hashes are in the format `$6$rounds=5000$salt$hash`. Which TWO of the following statements are true regarding the cracking of these hashes? (Choose two.)

A penetration tester extracts a password hash from a database that starts with $2y$10$. Which statement correctly identifies the algorithm and a key characteristic?

You are performing an offline attack against a password hash stored in an NTDS.dit file. You have successfully dumped the hashes using secretsdump.py. Given the format 'Username:RID:LMHash:NTHash:::', which hash should be targeted for a modern Windows environment to maximize cracking efficiency?

Which TWO of the following password cracking techniques are considered 'offline' attacks?

What is the primary security advantage of utilizing salts in password hashing?

Which attack type is most effective when an attacker has a list of usernames and a single password that they believe might be reused across multiple accounts?

What is the main risk associated with storing cleartext credentials in environment variables or configuration files?

What is the primary function of 'rules' in tools like Hashcat when performing a dictionary attack?

Which TWO of the following are characteristics of 'Salted' hashes compared to 'Unsalted' hashes?

When performing a penetration test, why is it safer to crack hashes offline rather than online?

A penetration tester has obtained a password hash from a Windows system: `aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0`. They attempt to crack it using Hashcat with mode 1000 but are unable to recover any plaintext. What is the most likely explanation for this failure?

A penetration tester has obtained a hash from a Linux system's /etc/shadow file: $6$rounds=656000$XyZ123$... The tester wants to crack this hash using John the Ripper. Which format should be specified to John to ensure correct cracking?

During a penetration test, you capture network traffic and obtain an MS-CHAPv2 challenge-response handshake. You want to crack it offline to recover the user's password. Which tool and mode combination is most appropriate for this task?

A penetration tester obtains a password hash from a Linux system's /etc/shadow file that begins with $6$. Which statement correctly describes this hash and its implications for cracking?

During an internal penetration test, you capture an NTLMv2 challenge-response pair using Responder. You want to crack it offline to obtain the user's password. Which Hashcat mode should you use?

A penetration tester extracts a password hash from a compromised Linux system. The hash format is `$6$rounds=5000$abcdefgh$...`. Which hashing algorithm and configuration does this represent?

A penetration tester has obtained a set of NTLM hashes from a Windows domain controller. The tester plans to perform an offline password cracking attack. Which two of the following techniques are most effective for increasing the success rate of cracking these hashes? (Choose two.)

A penetration tester is analyzing a password hash captured from a web application's database. The hash is `5f4dcc3b5aa765d61d8327deb882cf99` and is 32 characters long. Which type of hash is this, and what is a common tool to crack it?

A penetration tester has obtained a hash from a Linux system: `$1$salt$hash`. The tester wants to crack it using John the Ripper. Which format should be specified, and what is the main weakness of this hash type?