nerdexam
GIAC

GCIH · Question #8

Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary attack?

The correct answer is B. Nessus. Nessus is a comprehensive vulnerability scanner that includes plugins capable of calling the external tool Hydra to perform dictionary-based credential attacks against network services. The other tools listed do not have this specific integration.

Reconnaissance, Scanning, and Enumeration

Question

Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary attack?

Options

  • AWhishker
  • BNessus
  • CSARA
  • DNmap

How the community answered

(24 responses)
  • B
    96% (23)
  • D
    4% (1)

Why each option

Nessus is a comprehensive vulnerability scanner that includes plugins capable of calling the external tool Hydra to perform dictionary-based credential attacks against network services. The other tools listed do not have this specific integration.

AWhishker

Whisker (spelled 'Whishker' in the question) is a CGI scanner focused on web server vulnerability enumeration and does not integrate with Hydra for dictionary attacks.

BNessusCorrect

Nessus, developed by Tenable, is a full-featured vulnerability scanner that supports credential testing plugins which invoke Hydra - a parallelized login cracker - to perform dictionary attacks against services such as FTP, SSH, and HTTP. This integration allows Nessus to test for weak or default credentials as part of an authenticated or unauthenticated vulnerability scan.

CSARA

SARA (Security Auditor's Research Assistant) is a Unix-based network analysis tool derived from SATAN that performs host and service vulnerability checks but does not specifically call Hydra for dictionary attacks.

DNmap

Nmap is primarily a network discovery and port scanning tool - while it has the Nmap Scripting Engine with some brute-force scripts, it is not a vulnerability scanner and does not natively call Hydra as part of its scanning workflow.

Concept tested: Nessus integration with Hydra for dictionary attacks

Source: https://docs.tenable.com/nessus/Content/NessusHome.htm

Topics

#vulnerability scanning#Nessus#dictionary attack#Hydra integration

Community Discussion

No community discussion yet for this question.

Full GCIH Practice