Hybrid Attack uses dictionary words plus other methods to crack passwords.

• A. Dictionary Attack
• B. Hybrid Attack
• C. AS-REP Roasting
• D. Kerberoasting

Answer: (B)

This concept centers on combining a wordlist with deliberate modifications to guess passwords that are based on common words but tweaked to resist plain dictionary guesses. A hybrid attack starts with dictionary words, then automatically applies transformations—such as changing capitalization, substituting characters (like replacing o with 0 or a with @), and adding prefixes, suffixes, or symbols and numbers—to generate variants. This makes it much more effective against passwords like Password123, P@ssw0rd!, or Summer2023, which blend a dictionary word with common modifications.

A pure dictionary attack would only try the words exactly as they appear in the list, so it would miss those modified variants. The other techniques mentioned operate in a different space: AS-REP roasting targets Kerberos authentication by extracting password hashes from AS-REP responses, while Kerberoasting steals service-ticket data to crack hashes. Neither relies on mutating dictionary words, so they’re not the same approach as a hybrid attack.