What is a common use of L0phtcrack?

• A. To sniff SMB exchanges for user logons
• B. To scan networks for open ports
• C. To monitor bandwidth usage
• D. To inject code into memory

Answer: (A)

L0phtcrack is a password auditing tool that is commonly used to crack password hashes in order to determine whether passwords are strong enough. In many security assessments, attackers or testers first capture credentials that are used during logon processes, such as those transmitted over SMB, and then use L0phtcrack to crack the captured hashes to reveal the actual user logon credentials. This workflow—collecting credentials from SMB logon exchanges and cracking their hashes to expose the passwords—is a typical use case for the tool, which is why this option is considered correct in the context of the question. The other activities—scanning for open ports, monitoring bandwidth, or injecting code into memory—are not what L0phtcrack is designed for; they involve different tools and techniques.