John the Ripper is primarily used for which purpose?
- A.Web application scanning, and a SIEM removes the need for any endpoint agent
- B.Password cracking and auditing
- C.Log analysis
- D.Network monitoring
Why B is correct
John the Ripper is a password cracking tool used to audit password strength. It supports many hash formats, performs dictionary attacks, brute-force attacks, and incremental mode. It can crack Unix passwords (/etc/shadow), Windows hashes, ZIP/RAR passwords, and more. Security teams use it to identify weak passwords before attackers do.
Know someone studying for Security Fundamentals? Send them this one.