Which attack combines entries from two dictionaries to generate a new wordlist?

• A. PRINCE Attack
• B. Combinator Attack
• C. Markov-Chain Attack
• D. Toggle-Case Attack

Answer: (B)

Combining entries from two dictionaries to create a new wordlist is the essence of a combinator attack. This method takes one word from each dictionary and concatenates them to generate fresh password candidates, dramatically expanding the search space beyond what either list provides on its own. It captures common password patterns where users pair two words or a word with another word fragment, such as “hello123” or “summer2019,” by systematically creating combos like word1 + word2. Tools that perform combinator attacks often allow variations like inserting separators or mixing capitalization, further increasing coverage.

Other approaches focus on different ideas: Markov-Chain Attacks generate strings based on probabilistic models of character sequences; Toggle-Case Attacks only flip the case of letters in existing words; PRINCE Attack employs alternative mutation strategies rather than straightforward dictionary pairing. The key idea that matches “generate a new wordlist by combining two dictionaries” is the combinator attack.