Which Tool Brute-Forces SSH Passwords with Multiple Threads?
Which of the following tools can a penetration tester use to brute force a user password over SSH using multiple threads?
Community Votes
100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests your ability to distinguish online brute-force tools from offline crackers and wordlist generators; Hydra is the only option that performs network-based SSH brute forcing with multi-threading.
The PT0-002 exam asks which tool can brute force SSH passwords with multiple threads; the correct answer is Hydra, while CeWL, John the Ripper, and Hashcat serve different offline/custom wordlist purposes. Community consensus is unanimous for Hydra.
Choosing John the Ripper or Hashcat, which are offline password crackers that process local hashes and cannot directly brute force a live SSH service; John supports some network services in older versions, but not the intended answer here.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Hydra is a network authentication brute-forcing tool designed to attack remote services like SSH, HTTP, and FTP. It supports multi-threading, allowing many password guesses in parallel, which directly matches the question's requirement of "using multiple threads" over SSH. Comment [1] explicitly states "Hydra - correct answer, can brute-force over SSH," and the vote distribution (D:100) confirms unanimous agreement.
Why the Other Options Are Wrong
CeWL is a custom wordlist generator that spiders websites to create candidate passwords; it does not perform authentication attempts. John the Ripper and Hashcat are offline password crackers that work on local password hashes, not live SSH services. Although John the Ripper can be used to crack some network protocols in specific modes, it is not the go-to tool for multi-threaded online SSH brute forcing, and Hashcat has no built-in direct SSH network attack capability. Comment [1] categorizes these as offline cracking tools, reinforcing why they don't fit the scenario.
Community Comment Notes
Comment [1] provides a clear breakdown: CeWL - custom wordlist generator, John the Ripper - offline cracking, Hashcat - offline cracking, and Hydra - correct answer. This succinctly confirms the reasoning and is the most useful comment in the thread. Other comments simply repeat "D" without explanation, but the vote count of 100% D further solidifies the answer.
Official Reference
Exam Strategy
Remember the difference between online and offline password attacks: Hydra (and Medusa) are online brute-force tools for network services, while John the Ripper and Hashcat are offline crackers for local hashes. When you see 'SSH' and 'multiple threads,' think Hydra first.