312-50V12 Question #301: Real Exam Question with Answer & Explanation

Question

What would be the purpose of running "wget 192.168.0.15 -q -S" against a web server?

Options

• APerforming content enumeration on the web server to discover hidden folders
• BUsing wget to perform banner grabbing on the webserver
• CFlooding the web server with requests to perform a DoS attack
• DDownloading all the contents of the web page locally for further examination

Explanation

The wget command with the -q and -S flags is used to perform banner grabbing by retrieving and displaying HTTP server response headers without downloading the page content.

Common mistakes.

• A. The command does not include options for recursive scanning or directory bruteforcing, which are required for content enumeration or discovering hidden folders.
• C. A single wget command makes only one or a few requests and does not generate enough traffic to flood a web server and perform a Denial-of-Service attack.
• D. The -q and -S options are used to suppress the download and display of the actual web page content, instead focusing on retrieving and printing the server's response headers.

Concept tested. wget command options for banner grabbing

Reference. https://www.gnu.org/software/wget/manual/wget.html

No community discussion yet for this question.