nerdexam
GIAC

GCIH · Question #123

Which of the following tools can be used for network sniffing as well as for intercepting conversations through session hijacking?

The correct answer is D. Hunt. Hunt is a Linux-based tool specifically designed for both passive network sniffing and active TCP session hijacking - it can monitor connections and inject data or take over established sessions between two hosts. Tripwire is a file integrity monitoring tool, not a sniffer…

Web Application Attacks & Post-Exploitation

Question

Which of the following tools can be used for network sniffing as well as for intercepting conversations through session hijacking?

Options

  • AEthercap
  • BTripwire
  • CIPChains
  • DHunt

How the community answered

(32 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    3% (1)
  • D
    88% (28)

Explanation

Hunt is a Linux-based tool specifically designed for both passive network sniffing and active TCP session hijacking - it can monitor connections and inject data or take over established sessions between two hosts. Tripwire is a file integrity monitoring tool, not a sniffer. IPChains is a Linux firewall/packet filtering tool. 'Ethercap' (likely referring to Ettercap) is primarily a man-in-the-middle/sniffing tool, but Hunt is the classic dual-purpose answer for sniffing combined with direct session hijacking in CEH exam contexts.

Topics

#session hijacking#network sniffing#Hunt tool#ARP

Community Discussion

No community discussion yet for this question.

Full GCIH Practice