Exam GCIH All QuestionsBrowse all questions from this exam
Question 156

What is the outcome of the command below?

hashcat -m 0 -a 3 ntds.dat --potfile-path ntds.potfile -1 ?d?d?d?d?d?d

    Correct Answer: A

    The command uses Hashcat with the -m 0 option for MD5 hashes and -a 3 for brute-force attack mode. It specifies a password containing six numeric digits. Therefore, the outcome is to brute-force an MD5 hash whose input was numbers.

Discussion
korruptsystemsOption: A

Correct answer: A -m 0 is designated for MD5 (see reference: https://www.4armed.com/blog/hashcat-crack-md5-hashes/) LANMAN or LM would be -m 3000 (source for example hashes: https://gist.github.com/dwallraff/6a50b5d2649afeb1803757560c176401)

Vikt0rOption: B

Correct answer is B.. -m 0: Specifies the hash type, and 0 typically represents LM hash. -a 3: Specifies the attack mode, and 3 corresponds to a brute-force attack. ntds.dat: Represents the file containing the hashed passwords (NTLM hashes). --potfile-path ntds.potfile: Specifies the path to the file where cracked hashes will be stored. -1 ?d?d?d?d?d?d: Specifies a character set for the brute-force attack, where ?d represents numeric digits.