312-50V10 · Question #295
Pentest results indicate that voice over IP traffic is traversing a network. Which of the following tools will decode a packet capture and extract the voice conversations?
The correct answer is A. Cain. Cain & Abel is a multi-purpose security tool that includes a VoIP sniffer capable of capturing SIP/RTP traffic and reconstructing voice conversations from packet captures.
Question
Pentest results indicate that voice over IP traffic is traversing a network. Which of the following tools will decode a packet capture and extract the voice conversations?
Options
- ACain
- BJohn the Ripper
- CNikto
- DHping
How the community answered
(23 responses)- A96% (22)
- B4% (1)
Why each option
Cain & Abel is a multi-purpose security tool that includes a VoIP sniffer capable of capturing SIP/RTP traffic and reconstructing voice conversations from packet captures.
Cain & Abel includes a dedicated VoIP sniffer module that captures RTP streams and SIP signaling from live traffic or packet capture files, then reconstructs and plays back the actual audio conversations. This functionality makes it the appropriate tool when a pentester needs to extract intelligible voice data from captured VoIP sessions. No other option in this list has any VoIP decoding capability.
John the Ripper is a password hash cracking tool with no packet capture or VoIP decoding functionality.
Nikto is a web server vulnerability scanner focused on HTTP/HTTPS misconfigurations and has no ability to process or decode VoIP traffic.
Hping is a packet crafting and firewall testing tool used for sending custom TCP/IP packets, not for capturing or decoding voice conversations.
Concept tested: VoIP traffic interception and reconstruction using Cain
Topics
Community Discussion
No community discussion yet for this question.