CompTIA PenTest+ (PT0-002) — Question 429

Which of the following tools can a penetration tester use to brute force a user password over SSH using multiple threads?

Answer options

• A. CeWL
• B. John the Ripper
• C. Hashcat
• D. Hydra

Correct answer: D

Explanation

Hydra is designed specifically for conducting brute force attacks on various services, including SSH, and it supports multiple threads for efficiency. In contrast, CeWL is a wordlist generator, John the Ripper is primarily focused on cracking password hashes, and Hashcat is a password recovery tool that does not directly perform brute force attacks over SSH.