312-50V11 · Question #33
A hacker named Jack is trying to compromise a bank's computer system. He needs to know the operating system of that computer to launch further attacks. What process would help him?
The correct answer is A. Banner Grabbing. Banner grabbing reads service response banners from open ports, which often disclose the operating system and software versions running on a target. It is a primary active reconnaissance technique for OS fingerprinting.
Question
A hacker named Jack is trying to compromise a bank's computer system. He needs to know the operating system of that computer to launch further attacks. What process would help him?
Options
- ABanner Grabbing
- BIDLE/IPID Scanning
- CSSDP Scanning
- DUDP Scanning
How the community answered
(21 responses)- A90% (19)
- B5% (1)
- C5% (1)
Why each option
Banner grabbing reads service response banners from open ports, which often disclose the operating system and software versions running on a target. It is a primary active reconnaissance technique for OS fingerprinting.
Banner grabbing connects to common service ports such as 21 (FTP), 22 (SSH), or 80 (HTTP) and captures the text banner the service returns upon connection, which frequently includes the OS name, version, and application details. This gives an attacker like Jack reliable OS identification without sending aggressive or unusual probes. It is one of the simplest and most widely used techniques in the information gathering phase of an attack.
IDLE/IPID scanning is a stealth port discovery method using a zombie host to infer open ports, not a technique for identifying the target operating system.
SSDP scanning targets UPnP-enabled devices for network service discovery and does not reliably disclose the underlying OS.
UDP scanning probes for open UDP ports but does not retrieve banner information that identifies the operating system.
Concept tested: Banner grabbing for active OS fingerprinting
Source: https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/01-Information_Gathering/02-Fingerprint_Web_Server
Topics
Community Discussion
No community discussion yet for this question.