312-50V10 · Question #680
An attacker runs netcat tool to transfer a secret file between two hosts. Machine A: netcat -l -p 1234 < secretfile Machine B: netcat 192.168.3.4 > 1234 He is worried about information being sniffed…
The correct answer is D. Use cryptcat instead of netcat. Standard netcat has no built-in encryption capability; cryptcat is its encryption-capable replacement using the Twofish cipher.
Question
An attacker runs netcat tool to transfer a secret file between two hosts. Machine A: netcat -l -p 1234 < secretfile Machine B: netcat 192.168.3.4 > 1234 He is worried about information being sniffed on the network. How would the attacker use netcat to encrypt the information before transmitting onto the wire?
Options
- AMachine A: netcat -l -p -s password 1234 < testfile
- BMachine A: netcat -l -e magickey -p 1234 < testfile
- CMachine A: netcat -l -p 1234 < testfile -pw password
- DUse cryptcat instead of netcat
How the community answered
(25 responses)- C4% (1)
- D96% (24)
Why each option
Standard netcat has no built-in encryption capability; cryptcat is its encryption-capable replacement using the Twofish cipher.
Netcat does not have a -s flag for password-based encryption; this flag does not exist in the standard netcat implementation.
The netcat -e flag executes a specified program upon connection establishment and has no encryption function.
There is no -pw flag in netcat; this option is fabricated and would cause the command to fail.
Cryptcat is a netcat derivative that natively integrates Twofish symmetric encryption, automatically encrypting all data before it is placed on the wire without requiring additional flags or external tools. It is a drop-in replacement for netcat with identical syntax, making it the correct choice when confidentiality during file transfer is required.
Concept tested: Using cryptcat for encrypted netcat file transfer
Source: https://linux.die.net/man/1/cryptcat
Topics
Community Discussion
No community discussion yet for this question.