GCIH · Question #117
Adam works as a Penetration Tester for Umbrella Inc. A project has been assigned to him check the security of wireless network of the company. He re-injects a captured wireless packet back onto the…
The correct answer is A. Replay attack. Adam is performing a replay attack by re-injecting a captured ARP packet repeatedly to generate many IV responses, a classic technique used to crack WEP encryption.
Question
Adam works as a Penetration Tester for Umbrella Inc. A project has been assigned to him check the security of wireless network of the company. He re-injects a captured wireless packet back onto the network. He does this hundreds of times within a second. The packet is correctly encrypted and Adam assumes it is an ARP request packet. The wireless host responds with a stream of responses, all individually encrypted with different IVs. Which of the following types of attack is Adam performing?
Options
- AReplay attack
- BMAC Spoofing attack
- CCaffe Latte attack
- DNetwork injection attack
How the community answered
(22 responses)- A91% (20)
- C5% (1)
- D5% (1)
Why each option
Adam is performing a replay attack by re-injecting a captured ARP packet repeatedly to generate many IV responses, a classic technique used to crack WEP encryption.
A replay attack involves capturing a legitimate encrypted packet and retransmitting it repeatedly without needing to decrypt it. In WEP-protected networks, replaying ARP requests forces the access point to generate new responses each encrypted with a unique IV, and collecting thousands of IVs allows an attacker to statistically crack the WEP key using tools like aircrack-ng.
MAC spoofing involves forging a device's MAC address to impersonate another host on the network, not re-injecting captured packets.
The Caffe Latte attack targets an isolated wireless client by flipping bits in captured encrypted packets and replaying them back to the client to extract the WEP key, which is a different technique and target than what Adam is doing.
A network injection attack involves inserting forged management or control frames to disrupt or hijack a network, not repeatedly replaying a captured data packet to elicit IV-diverse responses.
Concept tested: WEP replay attack for IV collection
Source: https://www.aircrack-ng.org/doku.php?id=arp-request_reinjection
Topics
Community Discussion
No community discussion yet for this question.