Which attack is generally more resource-efficient according to the material: sniffing or cracking the LANMAN hash?

• A. Bruting the LANMAN hash.
• B. Replaying the handshake.
• C. Exploiting a buffer overflow.
• D. Using a Wi-Fi side-channel.

Answer: (A)

The key idea here is how efficiently you can obtain the password once you have access to a LANMAN hash. Brute-forcing the LANMAN hash is typically the more resource-efficient path because you can take a captured hash and run offline, highly parallelizable cracking processes (often on GPUs) without needing continuous access to the network or chasing real-time traffic. This means you can invest compute time up front and churn through possibilities until you recover the password, with relatively predictable resource use and result time, compared to trying to sniff enough traffic and extract plaintext credentials directly, which can be slow, unreliable, and easily detected.

Sniffing alone only collects data; it doesn’t directly yield the password and may require additional cracking anyway, plus it depends on network conditions and the amount of traffic observed. The other options—replaying a handshake, exploiting a buffer overflow, or using a Wi‑Fi side-channel—address different attack surfaces and don’t directly align with the goal of efficiently obtaining the password from the LANMAN hash.