nerdexam
EC-Council

312-50V10 · Question #9

If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which t

The correct answer is B. Hping. When ICMP is blocked on a network, traditional ping tools fail to determine host availability. Hping allows testers to craft and send custom TCP packets to probe hosts that would otherwise appear unreachable.

Scanning Networks

Question

If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which tool could the tester use to get a response from a host using TCP?

Options

  • ATraceroute
  • BHping
  • CTCP ping
  • DBroadcast ping

How the community answered

(54 responses)
  • A
    2% (1)
  • B
    89% (48)
  • C
    6% (3)
  • D
    4% (2)

Why each option

When ICMP is blocked on a network, traditional ping tools fail to determine host availability. Hping allows testers to craft and send custom TCP packets to probe hosts that would otherwise appear unreachable.

ATraceroute

Traceroute maps the network path to a destination and also typically relies on ICMP (or UDP) - it does not provide a simple TCP-based host liveness check and will also be blocked if ICMP is disabled.

BHpingCorrect

Hping is a command-line packet crafting and analysis tool that supports TCP, UDP, ICMP, and raw IP modes, allowing a tester to send TCP SYN or ACK packets to a target host and observe responses - functioning as a TCP-based ping even when ICMP is completely filtered. For example, 'hping3 -S <target> -p 80' sends a TCP SYN to port 80 and a SYN-ACK or RST response confirms the host is alive, bypassing ICMP-based firewall rules.

CTCP ping

While 'TCP ping' describes the concept, it is not a standalone widely recognized tool in the same way Hping is - Hping is the industry-standard tool used to perform this function in penetration testing.

DBroadcast ping

Broadcast ping sends ICMP echo requests to a network broadcast address and depends entirely on ICMP, making it useless when ICMP is disabled on the target network.

Concept tested: TCP-based host discovery using Hping when ICMP is blocked

Source: https://www.hping.org/manpage.html

Topics

#Hping#TCP ping#ICMP bypass#network probing

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice