nerdexam
GIAC

GCFA · Question #95

John works as a professional Ethical Hacker. He is assigned a project to test the security of we-are- secure network and intercept a conversation between two employees of the company through session…

The correct answer is C. Hunt. Hunt is a dedicated TCP session hijacking tool that can intercept, monitor, and take over active network sessions on a LAN.

Threat Hunting & Timeline Analysis

Question

John works as a professional Ethical Hacker. He is assigned a project to test the security of we-are- secure network and intercept a conversation between two employees of the company through session hijacking. Which of the following tools will John use to accomplish the task?

Options

  • AEthercap
  • BTripwire
  • CHunt
  • DIPChains

How the community answered

(31 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    77% (24)
  • D
    13% (4)

Why each option

Hunt is a dedicated TCP session hijacking tool that can intercept, monitor, and take over active network sessions on a LAN.

AEthercap

Ethercap (Ettercap) is primarily a man-in-the-middle sniffing tool focused on network traffic interception rather than TCP session hijacking specifically.

BTripwire

Tripwire is a file integrity monitoring and host-based intrusion detection tool that detects unauthorized changes to files, not a session hijacking utility.

CHuntCorrect

Hunt is specifically designed for TCP session hijacking, enabling an attacker to monitor active connections, inject data into established sessions, and collect transmitted information between hosts. Its core functionality - watching, resetting, and hijacking TCP sessions - directly matches the task of intercepting a conversation between two employees via session hijacking.

DIPChains

IPChains is a legacy Linux packet filtering and firewall framework used for network access control, not for intercepting or hijacking active sessions.

Concept tested: Session hijacking tools in ethical hacking

Source: https://owasp.org/www-community/attacks/Session_hijacking_attack

Topics

#session hijacking#network forensics#attack tools#Hunt

Community Discussion

No community discussion yet for this question.

Full GCFA Practice