QuestionQ94
Attacks and ExploitsA penetration tester is planning a password-spraying attack against a known list of users for the company "example." The tester uses the following commands:
- pw-inspector -i $allwords | tee $pass
- spray365.py spray -ep $plan
- users="~/user.txt"; allwords="~/words.txt"; pass="~/passwords.txt"; plan="~/spray.plan"
- spray365.py generate --password_file $pass --user file $user --domain "example.com" --execution_plan $plan
- cewl -m 5 "http://www.example.com" -w $allwords
Which order of commands is correct?
- A 3, 4, 1, 2, 5
- B 3, 1, 2, 5, 4
- C 2, 3, 1, 4, 5
- D 3, 5, 1, 4, 2
Community Discussion