A Rainbow Table Attack is best described as?

• A. A phishing scheme to steal user credentials
• B. A brute-force password guessing technique
• C. An SQL injection technique
• D. A method of data attack using a pre-computed table of hash strings to identify the original data source

Answer: (D)

Rainbow table attacks crack hashed passwords by using precomputed tables of hash values. Attackers generate a large table that associates many possible passwords with the hashes they produce, often using chains and reduction functions to collapse storage needs into a rainbow-like structure. When they obtain a password hash from a database, they look up that hash in the table to recover the original password without having to guess each possibility in real time. This speeds up password recovery compared to trying every guess on the fly. This method is not about phishing, it’s not about guessing passwords live through brute force, and it’s not SQL injection. Phishing is social engineering to steal credentials, brute-force guessing tests each candidate in real time, and SQL injection manipulates database queries. A key defense is to salt hashes and use strong, slow hashing algorithms so the same password yields different hashes, rendering precomputed rainbow tables ineffective.