1. Home
2. All questions
3. Question 481

CISSP study material · question 481 of 500

An attacker holding a breach corpus tries each leaked password and then variants such as the same password with an incremented digit. Which two OWASP terms describe these attacks? Choose two.

• Software security

1. Privilege escalation, moving from a user account to an administrative one.
2. Session fixation, reusing an identifier the attacker already knows.
3. A hybrid password attack, trying predictable variations or increments of the spilled credentials.
4. Credential stuffing, replaying username and password pairs from the breach.

Challenge yourself on this topic → Study as cards