GCIH · Question #190
John works as a Network Security Professional. He is assigned a project to test the security of with netcat and sends a bad html request in order to retrieve information about the service on the…
The correct answer is D. Banner grabbing. Banner grabbing is an active reconnaissance technique where an attacker sends a crafted request to a service and reads the response to identify the software and version running on a host.
Question
John works as a Network Security Professional. He is assigned a project to test the security of with netcat and sends a bad html request in order to retrieve information about the service on the host. Which of the following attacks is John using?
Exhibit
Options
- ASniffing
- BEavesdropping
- CWar driving
- DBanner grabbing
How the community answered
(33 responses)- B3% (1)
- C3% (1)
- D94% (31)
Why each option
Banner grabbing is an active reconnaissance technique where an attacker sends a crafted request to a service and reads the response to identify the software and version running on a host.
Sniffing is a passive technique that captures network packets in transit without actively sending requests to a target host.
Eavesdropping is the passive interception of communications between two other parties and does not involve probing a specific host with crafted requests.
War driving involves physically traveling with a wireless device to discover open or vulnerable Wi-Fi networks and is entirely unrelated to probing a specific host's network services.
John is performing banner grabbing by using netcat to send a malformed HTTP request to the target host and reading the server's response header, which typically reveals the web server software, version number, and operating system - a classic enumeration step in penetration testing.
Concept tested: Banner grabbing reconnaissance using netcat
Source: https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/01-Information_Gathering/02-Fingerprint_Web_Server
Topics
Community Discussion
No community discussion yet for this question.