CEH Enumeration and System Hacking Practice Question
During a penetration test, an analyst obtains a dump of password hashes from a Windows server. The hashes are in LM:NT format. The analyst wants to crack the NT portion using a brute-force attack on 8-character alphanumeric passwords. Which tool is BEST suited for this task?
⚠ Common exam trap
CEH often tests the misconception that RainbowCrack or Ophcrack are suitable for brute-force attacks, when in fact they are primarily rainbow table tools, not brute-force engines, and are ineffective for exhaustive search without precomputed tables.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Hashcat
Hashcat is the best tool for this task because it is optimized for high-speed GPU-accelerated brute-force attacks, making it ideal for cracking 8-character alphanumeric NT hashes. It supports the LM:NT format natively and allows precise control over attack modes, including brute-force with custom character sets, which is essential for exhaustive enumeration of 62^8 possibilities.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Hashcat
Why this is correct
Hashcat is the industry-standard password recovery tool, renowned for its unparalleled speed and efficiency in cracking various hash types, including NTLM, through highly optimized GPU-accelerated brute-force and dictionary attacks. Its ability to leverage modern graphics cards allows it to test billions of password candidates per second, making it the most effective choice for rapidly cracking password dumps obtained during a penetration test.
- ✗
John the Ripper
Why it's wrong here
John the Ripper (JtR) is a powerful, open-source password cracker supporting dictionary, single crack, and traditional brute-force modes across numerous hash formats. While capable of brute-forcing, JtR's primary optimization has historically been for CPU-based cracking, and although it has GPU support, it generally cannot match Hashcat's raw speed and efficiency when leveraging modern GPUs for intensive tasks like NTLM brute-forcing.
- ✗
RainbowCrack
Why it's wrong here
RainbowCrack is a specialized tool designed to perform time-memory trade-off attacks using precomputed rainbow tables, rather than brute-force. It significantly reduces the time required to crack passwords for specific hash types, such as LM and NTLM, by looking up pre-calculated hash-to-plaintext mappings, but it is not a brute-force utility that generates and tests every possible password combination.
- ✗
Ophcrack
Why it's wrong here
Ophcrack is a free, open-source Windows password cracker that exclusively utilizes precomputed rainbow tables to recover LM and NTLM hashes. Typically distributed as a live CD, it focuses on a specific attack vector by comparing captured hashes against its extensive database of pre-calculated values, making it a rainbow table tool rather than a brute-force application for general password cracking.
Go deeper
Related to this question
About these practice questions
This CEH question is part of Courseiva's 870-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.