CompTIA PenTest+ (PT0-002) — Question 295

A penetration tester discovers a login page during an assessment. Which of the following tools would the tester use to brute force a password?

Answer options

• A. Hydra
• B. Wireshark
• C. SQLmap
• D. TinEye

Correct answer: A

Explanation

Hydra is specifically designed for performing brute force attacks against various protocols, including HTTP, making it the correct choice for cracking passwords. Wireshark is a network protocol analyzer and does not perform password attacks. SQLmap is focused on detecting and exploiting SQL injection vulnerabilities, while TinEye is an image search tool and not relevant to brute forcing passwords.