GCFA · Question #136
John works as a professional Ethical Hacker. He has been assigned the project of testing the phases while testing the security of the server: Footprinting Scanning Now he wants to conduct the…
The correct answer is B. PsPasswd C. PsFile D. UserInfo. Enumeration is the phase where an attacker extracts detailed information about users, groups, shares, and services from target systems. PsPasswd (part of Sysinternals PsTools) allows changing account passwords remotely - useful for enumerating and manipulating accounts; PsFile…
Question
John works as a professional Ethical Hacker. He has been assigned the project of testing the phases while testing the security of the server:
- Footprinting
- Scanning
Now he wants to conduct the enumeration phase. Which of the following tools can John use to conduct it? Each correct answer represents a complete solution. Choose all that apply.
Options
- AWinSSLMiM
- BPsPasswd
- CPsFile
- DUserInfo
How the community answered
(40 responses)- A15% (6)
- B85% (34)
Explanation
Enumeration is the phase where an attacker extracts detailed information about users, groups, shares, and services from target systems. PsPasswd (part of Sysinternals PsTools) allows changing account passwords remotely - useful for enumerating and manipulating accounts; PsFile (also from PsTools) enumerates remotely opened files and their paths on a system; UserInfo is a tool used to enumerate user account information from Windows/LDAP environments. All three are valid enumeration tools. WinSSLMiM (option A) is a Man-in-the-Middle tool used for intercepting SSL traffic, which belongs to the sniffing/attack phase - not enumeration - making it the incorrect choice.
Topics
Community Discussion
No community discussion yet for this question.