GCFA · Question #95
John works as a professional Ethical Hacker. He is assigned a project to test the security of we-are- secure network and intercept a conversation between two employees of the company through session…
The correct answer is C. Hunt. Hunt is a dedicated TCP session hijacking tool that can intercept, monitor, and take over active network sessions on a LAN.
Question
John works as a professional Ethical Hacker. He is assigned a project to test the security of we-are- secure network and intercept a conversation between two employees of the company through session hijacking. Which of the following tools will John use to accomplish the task?
Options
- AEthercap
- BTripwire
- CHunt
- DIPChains
How the community answered
(31 responses)- A3% (1)
- B6% (2)
- C77% (24)
- D13% (4)
Why each option
Hunt is a dedicated TCP session hijacking tool that can intercept, monitor, and take over active network sessions on a LAN.
Ethercap (Ettercap) is primarily a man-in-the-middle sniffing tool focused on network traffic interception rather than TCP session hijacking specifically.
Tripwire is a file integrity monitoring and host-based intrusion detection tool that detects unauthorized changes to files, not a session hijacking utility.
Hunt is specifically designed for TCP session hijacking, enabling an attacker to monitor active connections, inject data into established sessions, and collect transmitted information between hosts. Its core functionality - watching, resetting, and hijacking TCP sessions - directly matches the task of intercepting a conversation between two employees via session hijacking.
IPChains is a legacy Linux packet filtering and firewall framework used for network access control, not for intercepting or hijacking active sessions.
Concept tested: Session hijacking tools in ethical hacking
Source: https://owasp.org/www-community/attacks/Session_hijacking_attack
Topics
Community Discussion
No community discussion yet for this question.