nerdexam
GIAC

GCIH · Question #132

Which of the following tasks can be performed by using netcat utility? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is B. Creating a Backdoor C. Firewall testing D. Port scanning and service identification. Netcat is a multipurpose network utility capable of creating backdoors, testing firewall rules, and scanning ports, but it lacks any file integrity or cryptographic hashing functionality.

Vulnerability Exploitation & Privilege Escalation

Question

Which of the following tasks can be performed by using netcat utility? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AChecking file integrity
  • BCreating a Backdoor
  • CFirewall testing
  • DPort scanning and service identification

How the community answered

(21 responses)
  • A
    10% (2)
  • B
    90% (19)

Why each option

Netcat is a multipurpose network utility capable of creating backdoors, testing firewall rules, and scanning ports, but it lacks any file integrity or cryptographic hashing functionality.

AChecking file integrity

File integrity checking requires cryptographic hashing tools such as sha256sum, md5sum, or dedicated solutions like Tripwire - netcat has no built-in hashing or checksum verification capability.

BCreating a BackdoorCorrect

Netcat can spawn interactive shell backdoors using the -e flag (e.g., nc -e /bin/sh) or by piping commands, giving an attacker persistent remote access.

CFirewall testingCorrect

By attempting TCP or UDP connections to specific ports on a firewall, netcat can verify which rules permit or deny traffic, making it useful for firewall rule testing.

DPort scanning and service identificationCorrect

Netcat can iterate across port ranges to identify open ports and capture service banners for identification, functioning as a basic port scanner.

Concept tested: Netcat utility capabilities - backdoor, port scan, firewall test

Source: https://man7.org/linux/man-pages/man1/ncat.1.html

Topics

#netcat#backdoor#port scanning#firewall testing

Community Discussion

No community discussion yet for this question.

Full GCIH Practice