Tyrion, a professional hacker, is targeting an organization to steal confidential information. He wants to perform website footprinting to obtain the following information, which is hidden in the web page header. - Connection status and content type - Accept-ranges and last-modified information - X-powered-by information - Web server in use and its version Which of the following tools should the Tyrion use to view header content?

EC-Council

312-85 · Question #42

Tyrion, a professional hacker, is targeting an organization to steal confidential information. He wants to perform website footprinting to obtain the following information, which is hidden in the…

The correct answer is D. Burp suite. Burp Suite is the correct answer because it functions as an intercepting proxy, allowing a tester to capture and inspect raw HTTP request/response traffic - including all header fields such as Server, Content-Type, Connection, X-Powered-By, Accept-Ranges, and Last-Modified…

Threat Intelligence Tools and Platforms

Question

Tyrion, a professional hacker, is targeting an organization to steal confidential information. He wants to perform website footprinting to obtain the following information, which is hidden in the web page header.

Connection status and content type
Accept-ranges and last-modified information
X-powered-by information
Web server in use and its version

Which of the following tools should the Tyrion use to view header content?

Options

AHydra
BAutoShun
CVanguard enforcer
DBurp suite

How the community answered

(53 responses)

A
2% (1)
C
4% (2)
D
94% (50)

Explanation

Burp Suite is the correct answer because it functions as an intercepting proxy, allowing a tester to capture and inspect raw HTTP request/response traffic - including all header fields such as Server, Content-Type, Connection, X-Powered-By, Accept-Ranges, and Last-Modified - making it the go-to tool for web application reconnaissance and footprinting.

Why the distractors are wrong:

Hydra (A) is a brute-force/password-cracking tool targeting login services - it has no header inspection capability.
AutoShun (B) is a threat intelligence and IP reputation service used for blocking malicious traffic, not for analyzing web headers.
Vanguard Enforcer (C) is a network access control/policy enforcement tool, unrelated to HTTP header analysis.

Memory tip: Think "Burp = Browser traffic interceptor" - Burp Suite sits between your browser and the server, letting you burp up every detail of the HTTP conversation, headers included.

Topics

#website footprinting#HTTP headers#Burp Suite#web server reconnaissance

Community Discussion

No community discussion yet for this question.

Full 312-85 Practice