312-50V10 · Question #9
If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which t
The correct answer is B. Hping. When ICMP is blocked on a network, traditional ping tools fail to determine host availability. Hping allows testers to craft and send custom TCP packets to probe hosts that would otherwise appear unreachable.
Question
If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which tool could the tester use to get a response from a host using TCP?
Options
- ATraceroute
- BHping
- CTCP ping
- DBroadcast ping
How the community answered
(54 responses)- A2% (1)
- B89% (48)
- C6% (3)
- D4% (2)
Why each option
When ICMP is blocked on a network, traditional ping tools fail to determine host availability. Hping allows testers to craft and send custom TCP packets to probe hosts that would otherwise appear unreachable.
Traceroute maps the network path to a destination and also typically relies on ICMP (or UDP) - it does not provide a simple TCP-based host liveness check and will also be blocked if ICMP is disabled.
Hping is a command-line packet crafting and analysis tool that supports TCP, UDP, ICMP, and raw IP modes, allowing a tester to send TCP SYN or ACK packets to a target host and observe responses - functioning as a TCP-based ping even when ICMP is completely filtered. For example, 'hping3 -S <target> -p 80' sends a TCP SYN to port 80 and a SYN-ACK or RST response confirms the host is alive, bypassing ICMP-based firewall rules.
While 'TCP ping' describes the concept, it is not a standalone widely recognized tool in the same way Hping is - Hping is the industry-standard tool used to perform this function in penetration testing.
Broadcast ping sends ICMP echo requests to a network broadcast address and depends entirely on ICMP, making it useless when ICMP is disabled on the target network.
Concept tested: TCP-based host discovery using Hping when ICMP is blocked
Source: https://www.hping.org/manpage.html
Topics
Community Discussion
No community discussion yet for this question.