GCFA · Question #208
You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?
The correct answer is A. Netcraft. Passive footprinting collects target information without directly interacting with the target system; Netcraft is a purpose-built passive reconnaissance tool that queries its own internet survey database to profile web servers.
Question
You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?
Options
- ANetcraft
- BEttercap
- CEthereal
- DNmap
How the community answered
(25 responses)- A84% (21)
- B8% (2)
- C4% (1)
- D4% (1)
Why each option
Passive footprinting collects target information without directly interacting with the target system; Netcraft is a purpose-built passive reconnaissance tool that queries its own internet survey database to profile web servers.
Netcraft performs passive footprinting by retrieving web server information - such as hosting history, operating system, server software, and uptime - from its own continuously updated internet survey database rather than probing the target directly. This makes it ideal for passive reconnaissance because no packets are sent to the target organization's infrastructure.
Ettercap is an active network interception and man-in-the-middle attack tool used for sniffing live network traffic, not a passive web server footprinting tool.
Ethereal (now Wireshark) is a packet capture and protocol analysis tool that requires active presence on a network segment to capture traffic, making it an active technique rather than passive footprinting.
Nmap is an active scanning tool that sends probe packets directly to the target's IP address or domain to enumerate open ports and services, which does not qualify as passive footprinting.
Concept tested: Passive web server footprinting using Netcraft
Source: https://www.netcraft.com/internet-data-mining/
Topics
Community Discussion
No community discussion yet for this question.