nerdexam
GIAC

GCIH · Question #117

Adam works as a Penetration Tester for Umbrella Inc. A project has been assigned to him check the security of wireless network of the company. He re-injects a captured wireless packet back onto the…

The correct answer is A. Replay attack. Adam is performing a replay attack by re-injecting a captured ARP packet repeatedly to generate many IV responses, a classic technique used to crack WEP encryption.

Vulnerability Exploitation & Privilege Escalation

Question

Adam works as a Penetration Tester for Umbrella Inc. A project has been assigned to him check the security of wireless network of the company. He re-injects a captured wireless packet back onto the network. He does this hundreds of times within a second. The packet is correctly encrypted and Adam assumes it is an ARP request packet. The wireless host responds with a stream of responses, all individually encrypted with different IVs. Which of the following types of attack is Adam performing?

Options

  • AReplay attack
  • BMAC Spoofing attack
  • CCaffe Latte attack
  • DNetwork injection attack

How the community answered

(22 responses)
  • A
    91% (20)
  • C
    5% (1)
  • D
    5% (1)

Why each option

Adam is performing a replay attack by re-injecting a captured ARP packet repeatedly to generate many IV responses, a classic technique used to crack WEP encryption.

AReplay attackCorrect

A replay attack involves capturing a legitimate encrypted packet and retransmitting it repeatedly without needing to decrypt it. In WEP-protected networks, replaying ARP requests forces the access point to generate new responses each encrypted with a unique IV, and collecting thousands of IVs allows an attacker to statistically crack the WEP key using tools like aircrack-ng.

BMAC Spoofing attack

MAC spoofing involves forging a device's MAC address to impersonate another host on the network, not re-injecting captured packets.

CCaffe Latte attack

The Caffe Latte attack targets an isolated wireless client by flipping bits in captured encrypted packets and replaying them back to the client to extract the WEP key, which is a different technique and target than what Adam is doing.

DNetwork injection attack

A network injection attack involves inserting forged management or control frames to disrupt or hijack a network, not repeatedly replaying a captured data packet to elicit IV-diverse responses.

Concept tested: WEP replay attack for IV collection

Source: https://www.aircrack-ng.org/doku.php?id=arp-request_reinjection

Topics

#replay attack#wireless security#WEP IV#packet re-injection

Community Discussion

No community discussion yet for this question.

Full GCIH Practice