A hybrid attack is a method that combines the dictionary attack with brute-force techniques. It starts with a list of known words (like in a dictionary attack) and then mutates them by:
Appending or prepending numbers (e.g., password1, 123hello)
Adding special characters (e.g., P@ssword!, admin#123)
Varying letter casing or leetspeak (e.g., h@x0r)
From CEH v13 Courseware:
Module 6: Malware Threats # Password Cracking Methods
Incorrect Options:
B: Linear is not a password cracking method.
C: Symmetric refers to encryption, not password cracking.
D: Brute-force tries every possible combination but does not start with a word list.
Reference:CEH v13 Study Guide - Module 6: Password Cracking Techniques # Hybrid Attacks