GCIH · Question #84
You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?
The correct answer is D. Netcraft. Netcraft is the correct tool for passive footprinting because it gathers publicly available information about a web server without sending any packets directly to the target.
Question
You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?
Options
- ANmap
- BEthereal
- CEttercap
- DNetcraft
How the community answered
(40 responses)- A3% (1)
- B5% (2)
- D93% (37)
Why each option
Netcraft is the correct tool for passive footprinting because it gathers publicly available information about a web server without sending any packets directly to the target.
Nmap is an active scanning tool that sends packets directly to the target host to discover open ports and services, which is active footprinting, not passive.
Ethereal (now Wireshark) is a packet capture and analysis tool that requires the investigator to be on the network path, making it an active network-level activity rather than passive footprinting.
Ettercap is an active man-in-the-middle and sniffing tool that intercepts live network traffic, which involves direct interaction with the target network and is not passive reconnaissance.
Netcraft is a web-based reconnaissance service that performs passive footprinting by querying its own historical database to reveal a target's web server software, hosting history, uptime records, and SSL certificate details. Because the investigator queries Netcraft's servers rather than the target directly, no traffic is sent to the target organization. This makes it a true passive reconnaissance tool suitable for stealthy information gathering.
Concept tested: Passive footprinting tools and web server reconnaissance
Source: https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/01-Information_Gathering/02-Fingerprint_Web_Server
Topics
Community Discussion
No community discussion yet for this question.