A user on your Windows 2000 network has discovered that he can use L0phtcrack to sniff the SMB
exchanges which carry user logons. The user is plugged into a hub with 23 other systems. However, he is
unable to capture any logons though he knows that other users are logging in.
What do you think is the most likely reason behind this?
In the context of password security, a simple dictionary attack involves loading a dictionary file (a text file full
of dictionary words) into a cracking application such as L0phtCrack or John the Ripper, and running it
against user accounts located by the application. The larger the word and word fragment selection, the
more effective the dictionary attack is. The brute force method is the most inclusive, although slow. It
usually tries every possible letter and number combination in its automated exploration.
If you would use both brute force and dictionary methods combined together to have variation of words,
what would you call such an attack?