nerdexam
GIAC

GCIH · Question #134

You work as a professional Ethical Hacker. You are assigned a project to test the security of Windows based. While you are installing the NetCat tool as a backdoor in the we-are-secure server, you…

The correct answer is C. You will use CryptCat instead of NetCat. This question tests knowledge of CryptCat as the encrypted variant of NetCat used to transfer data covertly over a network without exposing contents in cleartext.

Vulnerability Exploitation & Privilege Escalation

Question

You work as a professional Ethical Hacker. You are assigned a project to test the security of Windows based. While you are installing the NetCat tool as a backdoor in the we-are-secure server, you see the file credit.dat having the list of credit card numbers of the company's employees. You want to transfer the credit.dat file in your local computer so that you can sell that information on the internet in the good price. However, you do not want to send the contents of this file in the clear text format since you do not want that the Network Administrator of the we-are-secure Inc. can get any clue of the hacking attempt. Hence, you decide to send the content of the credit.dat file in the encrypted format. What steps should you take to accomplish the task?

Options

  • AYou will use the ftp service.
  • BYou will use Wireshark.
  • CYou will use CryptCat instead of NetCat.
  • DYou will use brutus.

How the community answered

(18 responses)
  • B
    6% (1)
  • C
    83% (15)
  • D
    11% (2)

Why each option

This question tests knowledge of CryptCat as the encrypted variant of NetCat used to transfer data covertly over a network without exposing contents in cleartext.

AYou will use the ftp service.

FTP transmits all data including file contents in cleartext, meaning any packet sniffer on the network could capture and read the transferred file.

BYou will use Wireshark.

Wireshark is a passive network packet capture and analysis tool used for inspecting traffic, not for transferring files between hosts.

CYou will use CryptCat instead of NetCat.Correct

CryptCat is a modified version of NetCat that incorporates Twofish encryption for all data transmitted between two endpoints, ensuring that file contents cannot be read by packet capture or network monitoring tools. By substituting CryptCat for NetCat, the attacker can pipe the credit.dat file across the connection in an encrypted stream, preventing the network administrator from inspecting the payload and identifying the exfiltration attempt.

DYou will use brutus.

Brutus is a remote authentication brute-force cracking tool used to guess passwords, and has no capability for file transfer or encryption.

Concept tested: CryptCat encrypted exfiltration over network

Topics

#CryptCat#netcat#encrypted transfer#backdoor

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GCIH Practice