GCIH · Question #221
Which of the following is used to gather information about a remote network protected by a firewall?
The correct answer is D. Firewalking. Firewalking is a reconnaissance technique that uses TTL manipulation to enumerate which ports or protocols are permitted through a firewall protecting a remote network. The other options either target different attack surfaces or are not real techniques.
Question
Which of the following is used to gather information about a remote network protected by a firewall?
Options
- AWarchalking
- BWardialing
- CFirechalking
- DFirewalking
How the community answered
(44 responses)- B2% (1)
- C5% (2)
- D93% (41)
Why each option
Firewalking is a reconnaissance technique that uses TTL manipulation to enumerate which ports or protocols are permitted through a firewall protecting a remote network. The other options either target different attack surfaces or are not real techniques.
Warchalking involves drawing symbols in physical locations to indicate nearby wireless network availability and has no relevance to firewall rule enumeration.
Wardialing automates dialing large ranges of phone numbers to discover modems or fax machines and does not apply to firewall-protected IP networks.
Firechalking is not a recognized security technique or tool in any standard security reference.
Firewalking sends probe packets with a TTL calibrated to expire exactly one hop beyond the firewall - if a port is open the packet reaches the target host and may elicit a response, whereas closed or filtered ports yield no response or an ICMP error, allowing the attacker to map the firewall's access control rules. This technique specifically enables reconnaissance of remote networks protected by firewalls without requiring direct access to the defended segment.
Concept tested: Firewalking technique for firewall reconnaissance
Source: https://owasp.org/www-community/attacks/Firewalking
Topics
Community Discussion
No community discussion yet for this question.