GCIH · Question #195
Which of the following scanning tools is also a network analysis tool that sends packets with nontraditional IP stack parameters and allows the scanner to gather information from the response…
The correct answer is D. HPing. HPing is a command-line packet crafting and network analysis tool that can send TCP/IP packets with custom, nonstandard parameters and analyze the responses to gather information about a target.
Question
Which of the following scanning tools is also a network analysis tool that sends packets with nontraditional IP stack parameters and allows the scanner to gather information from the response packets generated?
Options
- ATcpview
- BNessus
- CLegion
- DHPing
How the community answered
(31 responses)- A6% (2)
- B3% (1)
- C3% (1)
- D87% (27)
Why each option
HPing is a command-line packet crafting and network analysis tool that can send TCP/IP packets with custom, nonstandard parameters and analyze the responses to gather information about a target.
Tcpview is a Windows Sysinternals utility that passively displays active TCP and UDP connection endpoints on the local machine and does not send crafted packets to remote targets.
Nessus is a vulnerability scanner that checks hosts against a database of known vulnerabilities and does not primarily operate by sending packets with nonstandard IP stack parameters for manual analysis.
Legion is a network scanner and SMB share enumeration tool focused on Windows share brute-forcing and service detection, not a general-purpose packet crafting and IP stack analysis utility.
HPing allows a user to craft packets with arbitrary flags, TTL values, fragmentation settings, and other IP stack parameters that fall outside normal behavior, then interpret the response packets to infer host state, firewall rules, and OS characteristics. This packet-level flexibility distinguishes it as both a scanning tool and a low-level network analysis tool simultaneously.
Concept tested: HPing packet crafting and nonstandard IP stack analysis
Source: http://www.hping.org/documentation.php
Topics
Community Discussion
No community discussion yet for this question.