Password Attacks, Password Cracking, and ways to minimize successful attempts - Sec+

Question	Answer
SAM or Shadow Folder	where the hashes of passwords are stored on a local device SAM on Windows Shadow Folder on Linux
Brute Force Attack	runs through a series of characters, attempting every possible combination preferred method is offline, where the attacker has the pass hash database online runs the risk of lockout
Dictionary Attack	involves hashing a very long list of words to see if the hash in question is produced
Hybrid Attack	combination of brute force and dictionary attacks adds a numeric prefix or suffix to password, or replaces certain characters with special characters
Password Spraying	uses common passwords along with multiple usernames
Guessing Attack	uses knowledge about the victim to guess the password
Birthday Attack	the likelihood that 2 or more passwords have the same hash within a group
Rainbow Attack	a table (rainbow table) of pre-hashed passwords available on the internet and have millions of hashes available
Salting	random text is added to a password before hashing it

Resource summary

	Created by Lyndsay Badding about 1 year ago