Ravi Sir's Cyber Security Cards › Comparison Cards
Online vs Offline Password Attacks
Comparison card: Online vs Offline Password Attacks. Easy English, with a real example. Scan the QR for the full lesson.
Read card text
What this card says
What each one is
Online attack: trying passwords against a live login page.
Offline attack: cracking a stolen hash on the attacker's own computer.
How they differ
Online is slow and can be locked out or alerted.
Offline is fast, with no lockout, limited only by hardware.
Example
Online: Hydra against an SSH login.
Offline: Hashcat cracking a leaked password hash.
Defence
Online: lockout, MFA, fail2ban.
Offline: strong salted hashes like bcrypt.
Learn more in the lesson: 22.2 Online vs Offline Attacks, and Wordlists