A company is concerned about disgruntled employees transferring its intellectual property data through covert channels. Which of the following tools would allow employees to write data into ICMP…

The correct answer is D. Loki. Loki is a well-known tool that creates a covert communication channel by embedding arbitrary data in the payload of ICMP echo request and reply (ping) packets. Because ICMP is frequently permitted through firewalls and is not deeply inspected, it serves as an effective…

Enterprise Security Operations

Question

A company is concerned about disgruntled employees transferring its intellectual property data through covert channels. Which of the following tools would allow employees to write data into ICMP echo response packets?

Options

AThor
BJack the Ripper
CBurp Suite
DLoki

How the community answered

(13 responses)

A
8% (1)
C
8% (1)
D
85% (11)

Explanation

Loki is a well-known tool that creates a covert communication channel by embedding arbitrary data in the payload of ICMP echo request and reply (ping) packets. Because ICMP is frequently permitted through firewalls and is not deeply inspected, it serves as an effective exfiltration channel. John the Ripper (likely what 'Jack the Ripper' refers to) is a password-cracking tool. Burp Suite is a web application security testing proxy used for intercepting and manipulating HTTP traffic. Thor is not a standard security tool in this context. Loki is the definitive tool associated with ICMP-based covert tunneling and data exfiltration.

Topics

#covert channels#ICMP tunneling#data exfiltration#Loki

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice