A penetration tester identifies that a web application's login form is not using secure password...

Perform a dictionary attack using a list of commonly used passwords against the stolen hash values

Input a SQL query to check for SQL injection vulnerabilities in the login form

Conduct a brute-force attack on the login form to guess weak passwords

Capture the login request using a proxy tool and attempt to decrypt the passwords