nerdexam
EC-Council

312-50V11 · Question #33

A hacker named Jack is trying to compromise a bank's computer system. He needs to know the operating system of that computer to launch further attacks. What process would help him?

The correct answer is A. Banner Grabbing. Banner grabbing reads service response banners from open ports, which often disclose the operating system and software versions running on a target. It is a primary active reconnaissance technique for OS fingerprinting.

Enumeration

Question

A hacker named Jack is trying to compromise a bank's computer system. He needs to know the operating system of that computer to launch further attacks. What process would help him?

Options

  • ABanner Grabbing
  • BIDLE/IPID Scanning
  • CSSDP Scanning
  • DUDP Scanning

How the community answered

(21 responses)
  • A
    90% (19)
  • B
    5% (1)
  • C
    5% (1)

Why each option

Banner grabbing reads service response banners from open ports, which often disclose the operating system and software versions running on a target. It is a primary active reconnaissance technique for OS fingerprinting.

ABanner GrabbingCorrect

Banner grabbing connects to common service ports such as 21 (FTP), 22 (SSH), or 80 (HTTP) and captures the text banner the service returns upon connection, which frequently includes the OS name, version, and application details. This gives an attacker like Jack reliable OS identification without sending aggressive or unusual probes. It is one of the simplest and most widely used techniques in the information gathering phase of an attack.

BIDLE/IPID Scanning

IDLE/IPID scanning is a stealth port discovery method using a zombie host to infer open ports, not a technique for identifying the target operating system.

CSSDP Scanning

SSDP scanning targets UPnP-enabled devices for network service discovery and does not reliably disclose the underlying OS.

DUDP Scanning

UDP scanning probes for open UDP ports but does not retrieve banner information that identifies the operating system.

Concept tested: Banner grabbing for active OS fingerprinting

Source: https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/01-Information_Gathering/02-Fingerprint_Web_Server

Topics

#banner grabbing#OS fingerprinting#service detection#enumeration

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice