nerdexam
GIAC

GCIH · Question #195

Which of the following scanning tools is also a network analysis tool that sends packets with nontraditional IP stack parameters and allows the scanner to gather information from the response…

The correct answer is D. HPing. HPing is a command-line packet crafting and network analysis tool that can send TCP/IP packets with custom, nonstandard parameters and analyze the responses to gather information about a target.

Reconnaissance, Scanning, and Enumeration

Question

Which of the following scanning tools is also a network analysis tool that sends packets with nontraditional IP stack parameters and allows the scanner to gather information from the response packets generated?

Options

  • ATcpview
  • BNessus
  • CLegion
  • DHPing

How the community answered

(31 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    3% (1)
  • D
    87% (27)

Why each option

HPing is a command-line packet crafting and network analysis tool that can send TCP/IP packets with custom, nonstandard parameters and analyze the responses to gather information about a target.

ATcpview

Tcpview is a Windows Sysinternals utility that passively displays active TCP and UDP connection endpoints on the local machine and does not send crafted packets to remote targets.

BNessus

Nessus is a vulnerability scanner that checks hosts against a database of known vulnerabilities and does not primarily operate by sending packets with nonstandard IP stack parameters for manual analysis.

CLegion

Legion is a network scanner and SMB share enumeration tool focused on Windows share brute-forcing and service detection, not a general-purpose packet crafting and IP stack analysis utility.

DHPingCorrect

HPing allows a user to craft packets with arbitrary flags, TTL values, fragmentation settings, and other IP stack parameters that fall outside normal behavior, then interpret the response packets to infer host state, firewall rules, and OS characteristics. This packet-level flexibility distinguishes it as both a scanning tool and a low-level network analysis tool simultaneously.

Concept tested: HPing packet crafting and nonstandard IP stack analysis

Source: http://www.hping.org/documentation.php

Topics

#HPing#packet crafting#network scanning#IP stack manipulation

Community Discussion

No community discussion yet for this question.

Full GCIH Practice