PT0-003: CompTIA PenTest+Demo

Question

During an internal assessment, a tester runs the following command:

crackmapexec smb 192.168.1.0/24 -u user.txt -p Summer123@

What is the command’s primary purpose?

A To perform a pass-the-hash attack over multiple endpoints within the internal network
B To perform common protocol scanning within the internal network
C To perform password spraying on internal systems
D To execute a command in multiple endpoints at the same time

Explanation

Password spraying attempts one password against many user accounts or systems. The SMB command supplies a username list with -u user.txt and one plaintext password with -p Summer123@ across the internal subnet.

PT0-003: CompTIA PenTest+Demo

AstroTutor

Notes

Readiness

QuestionQ185

Community Discussion