Which mode applies a dictionary attack with rules for guessing?

Study for the SANS560 GIAC Penetration Tester (GPEN) Test. Study with flashcards and multiple choice questions, each question has hints and explanations. Get ready for your exam!

Multiple Choice

Which mode applies a dictionary attack with rules for guessing?

Explanation:
A dictionary attack with rules uses a predefined list of words and then mutates those words with a set of transformation rules to generate many plausible guesses. The mode that embodies this approach loads a wordlist and can apply a rules file to each entry, producing variants like capitalized forms, appended digits, substitutions (like replacing letters with common substitutions), and other common patterns. This combination—a base wordlist plus rule-based mutations—matches how many real passwords are created from simple words with small, sensible modifications. Single Crack relies on known user-derived strings and doesn't systematically expand a dictionary with rules. Incremental tries every possible character combination up to a limit, without referencing a dictionary. External mode involves using externally supplied rules or generators rather than the built-in dictionary+rules workflow.

A dictionary attack with rules uses a predefined list of words and then mutates those words with a set of transformation rules to generate many plausible guesses. The mode that embodies this approach loads a wordlist and can apply a rules file to each entry, producing variants like capitalized forms, appended digits, substitutions (like replacing letters with common substitutions), and other common patterns. This combination—a base wordlist plus rule-based mutations—matches how many real passwords are created from simple words with small, sensible modifications.

Single Crack relies on known user-derived strings and doesn't systematically expand a dictionary with rules. Incremental tries every possible character combination up to a limit, without referencing a dictionary. External mode involves using externally supplied rules or generators rather than the built-in dictionary+rules workflow.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy