What does CEWL do in the context of password cracking preparation?

• A. Spider websites to build word lists
• B. Enumerate users
• C. Collect logs
• D. Generate random strings

Answer: (A)

CEWL is used to build a tailored password-cracking word list by spidering a target website and harvesting words from its pages. It crawls the site, extracts distinct words (often filtering by length and relevance), and outputs them into a dictionary that can be fed into tools like John the Ripper or Hashcat. This approach leverages real words, names, and phrases that may appear in passwords, making the dictionary more effective for the target. Other options describe different activities (enumerating users, collecting logs, or generating random strings) that don’t create a site-derived word list used for credential guessing.