nerdexam
EC-Council

312-50V10 · Question #680

An attacker runs netcat tool to transfer a secret file between two hosts. Machine A: netcat -l -p 1234 < secretfile Machine B: netcat 192.168.3.4 > 1234 He is worried about information being sniffed…

The correct answer is D. Use cryptcat instead of netcat. Standard netcat has no built-in encryption capability; cryptcat is its encryption-capable replacement using the Twofish cipher.

Sniffing

Question

An attacker runs netcat tool to transfer a secret file between two hosts. Machine A: netcat -l -p 1234 < secretfile Machine B: netcat 192.168.3.4 > 1234 He is worried about information being sniffed on the network. How would the attacker use netcat to encrypt the information before transmitting onto the wire?

Options

  • AMachine A: netcat -l -p -s password 1234 < testfile
  • BMachine A: netcat -l -e magickey -p 1234 < testfile
  • CMachine A: netcat -l -p 1234 < testfile -pw password
  • DUse cryptcat instead of netcat

How the community answered

(25 responses)
  • C
    4% (1)
  • D
    96% (24)

Why each option

Standard netcat has no built-in encryption capability; cryptcat is its encryption-capable replacement using the Twofish cipher.

AMachine A: netcat -l -p -s password 1234 < testfile

Netcat does not have a -s flag for password-based encryption; this flag does not exist in the standard netcat implementation.

BMachine A: netcat -l -e magickey -p 1234 < testfile

The netcat -e flag executes a specified program upon connection establishment and has no encryption function.

CMachine A: netcat -l -p 1234 < testfile -pw password

There is no -pw flag in netcat; this option is fabricated and would cause the command to fail.

DUse cryptcat instead of netcatCorrect

Cryptcat is a netcat derivative that natively integrates Twofish symmetric encryption, automatically encrypting all data before it is placed on the wire without requiring additional flags or external tools. It is a drop-in replacement for netcat with identical syntax, making it the correct choice when confidentiality during file transfer is required.

Concept tested: Using cryptcat for encrypted netcat file transfer

Source: https://linux.die.net/man/1/cryptcat

Topics

#netcat#cryptcat#encrypted file transfer#network sniffing prevention

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice