CEH Enumeration and System Hacking Practice Question
An attacker has obtained password hashes from a Windows system. They plan to use rainbow tables to crack them. Which tool would be most appropriate for generating and using rainbow tables?
⚠ Common exam trap
EC-Council often tests the distinction between tools that crack passwords via brute-force/dictionary (Hashcat, John the Ripper) versus tools that specifically leverage precomputed rainbow tables (RainbowCrack, Ophcrack), and candidates mistakenly choose Hashcat because it is the most popular GPU cracker, ignoring the explicit 'rainbow tables' requirement.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
RainbowCrack
RainbowCrack is the tool specifically designed for generating and using rainbow tables, which are precomputed hash chains used to reverse cryptographic hash functions. The question explicitly asks for the tool most appropriate for generating and using rainbow tables, and RainbowCrack directly supports both creating rainbow tables (with rtgen) and performing lookups (with rcsort and rcrack).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Hashcat
Why it's wrong here
Hashcat is a highly optimized, GPU-accelerated password recovery tool renowned for its speed in performing various attack types, including dictionary, brute-force, mask, and hybrid attacks. While extremely effective against many hash types, it directly computes hashes for each guess rather than relying on precomputed rainbow tables. Therefore, it is not the primary tool for *using* rainbow tables for hash cracking.
- ✗
Ophcrack
Why it's wrong here
Ophcrack is a specialized tool designed to crack Windows LM and NTLM password hashes by leveraging its own extensive precomputed rainbow tables. While it effectively utilizes rainbow table technology, its scope is primarily limited to these specific Windows hash formats and it typically comes with its own set of pre-generated tables, rather than being a general-purpose utility for generating or using custom rainbow tables for any arbitrary hash type.
- ✗
John the Ripper
Why it's wrong here
John the Ripper (JtR) is a widely used password cracker known for its versatility in performing dictionary attacks, brute-force attacks, and single crack mode with sophisticated rule sets. It excels at testing potential passwords against hashes by generating and hashing candidates on the fly. However, JtR's core functionality does not involve the direct use or lookup against precomputed rainbow tables for its cracking process.
- ✓
RainbowCrack
Why this is correct
RainbowCrack is the definitive and specialized tool explicitly designed for the generation and utilization of rainbow tables. It implements the time-memory tradeoff technique to precompute cryptographic hash chains, allowing for rapid lookup of plaintext passwords from their corresponding hashes. This makes RainbowCrack the standard choice when an attacker intends to leverage or create rainbow tables for efficient password cracking.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CEH question from scratch — 870 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.