Password attacks (2.4)

Plaintext / unencrypted passwords

Applications that store passwords “in the clear” meaning no encryption and you can read the stored password as plaintext.

hashing a password

The hash represents as like a fingerprint for a password, should not have collision, and should be impossible to recover the original password

Spraying attack

When an attacker uses a list of common passwords to try and get into an account but only try a certain amount to prevent a lockout

What does the brute force hash process look like?

An attacker hash for the right password, but they need the plain text so they continuously put in different combos of plain text until the hash matches