nerdexam
EC-Council

312-50V11 · Question #870

If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which…

The correct answer is B. Hping. Hping is a command-line packet crafting tool that supports TCP, UDP, and ICMP, making it useful for host discovery when ICMP is blocked on a network.

Scanning Networks

Question

If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which other option could the tester use to get a response from a host using TCP?

Options

  • ATraceroute
  • BHping
  • CTCP ping
  • DBroadcast ping

How the community answered

(22 responses)
  • A
    5% (1)
  • B
    86% (19)
  • D
    9% (2)

Why each option

Hping is a command-line packet crafting tool that supports TCP, UDP, and ICMP, making it useful for host discovery when ICMP is blocked on a network.

ATraceroute

Traceroute by default relies on ICMP echo or UDP packets, meaning it would also be blocked or return unreachable responses in the same restricted environment.

BHpingCorrect

Hping can craft and transmit TCP SYN or ACK packets directly to a target host, functioning as a TCP-based ping when ICMP is unavailable. A live host will respond with a TCP RST or SYN-ACK, confirming its existence without relying on ICMP echo requests. This makes hping a preferred tool for testers operating in environments that filter ICMP but allow TCP traffic.

CTCP ping

TCP ping describes the technique or concept being applied, but it is not a standalone tool - hping is the specific utility used to implement TCP-based host probing.

DBroadcast ping

Broadcast ping sends ICMP echo requests to a network broadcast address and still depends on ICMP, so it would not work when ICMP is disabled.

Concept tested: TCP-based host discovery with Hping when ICMP is blocked

Source: http://www.hping.org/documentation.php

Topics

#Hping#TCP ping#ICMP alternatives#host discovery

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice