Which attack tries all possible upper and lower case combinations of a word in the input dictionary?

Prepare for the Certified Ethical Hacker Version 11 Exam. Study with comprehensive questions and explanations. Equip yourself with the skills needed for success!

Multiple Choice

Which attack tries all possible upper and lower case combinations of a word in the input dictionary?

Explanation:
Toggling the case of each character in dictionary words to cover all capitalization possibilities is the idea here. A toggle-case attack generates every possible upper/lower case combination for each word in the input dictionary. For a word of length n, that means 2^n variations, including all-lowercase, all-uppercase, and every mixed-case form in between. This makes it effective against passwords that are simple dictionary words but with mixed-case usage, since many users mix case even when choosing from common words. In practice, you’d take a word like “password” and try variations such as Password, PaSSword, PASSWORD, and so on, until you hit the correct one. The other options relate to different domains: one is a cryptanalysis or cipher-related technique, another is a Kerberos toolkit, and the last is a Kerberos credential-forging attack. They don’t describe the technique of enumerating all case combinations in a dictionary.

Toggling the case of each character in dictionary words to cover all capitalization possibilities is the idea here. A toggle-case attack generates every possible upper/lower case combination for each word in the input dictionary. For a word of length n, that means 2^n variations, including all-lowercase, all-uppercase, and every mixed-case form in between. This makes it effective against passwords that are simple dictionary words but with mixed-case usage, since many users mix case even when choosing from common words. In practice, you’d take a word like “password” and try variations such as Password, PaSSword, PASSWORD, and so on, until you hit the correct one.

The other options relate to different domains: one is a cryptanalysis or cipher-related technique, another is a Kerberos toolkit, and the last is a Kerberos credential-forging attack. They don’t describe the technique of enumerating all case combinations in a dictionary.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy