PT0-002 Vulnerability Discovery and Analysis Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Hydra

  Why this is correct

  Hydra is a network authentication brute-force tool designed to perform online attacks against live services. It actively submits username and password guesses to a running protocol such as SSH, HTTP, or FTP over the network, making it the correct choice for an online SSH brute-force attempt. Hydra supports many protocols, can employ custom wordlists, and offers concurrency controls to speed up the attack while respecting service limitations.

• ✗

  John the Ripper

  Why it's wrong here

  John the Ripper is an offline password cracker that operates on password hash files, not live network services. It does not send authentication attempts to a remote server, so it cannot perform an online brute-force attack against SSH. Instead, John the Ripper takes a captured hash and tries to recover the plaintext password by guessing candidates and comparing their hashes locally.

• ✗

  CrackMapExec

  Why it's wrong here

  CrackMapExec is a post-exploitation and network enumeration tool focused on Windows Active Directory environments. It authenticates via protocols such as SMB, LDAP, and WinRM, but it is not designed to perform online brute-force attacks against SSH services. While CrackMapExec can validate credentials, its protocol support and purpose are misaligned with an SSH brute-force task.

• ✗

  Hashcat

  Why it's wrong here

  Hashcat is a GPU-accelerated offline hash-cracking tool that works on local hash values, not on a live network service. It does not interact with an SSH server or submit passwords over the network, so it cannot be used for online brute-force attacks. Hashcat is highly effective for cracking stolen password hashes but is the wrong tool when the target is a reachable SSH service.

Go deeper

Related to this question