nerdexam
GIAC

GCIH · Question #84

You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?

The correct answer is D. Netcraft. Netcraft is the correct tool for passive footprinting because it gathers publicly available information about a web server without sending any packets directly to the target.

Reconnaissance, Scanning, and Enumeration

Question

You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?

Options

  • ANmap
  • BEthereal
  • CEttercap
  • DNetcraft

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    5% (2)
  • D
    93% (37)

Why each option

Netcraft is the correct tool for passive footprinting because it gathers publicly available information about a web server without sending any packets directly to the target.

ANmap

Nmap is an active scanning tool that sends packets directly to the target host to discover open ports and services, which is active footprinting, not passive.

BEthereal

Ethereal (now Wireshark) is a packet capture and analysis tool that requires the investigator to be on the network path, making it an active network-level activity rather than passive footprinting.

CEttercap

Ettercap is an active man-in-the-middle and sniffing tool that intercepts live network traffic, which involves direct interaction with the target network and is not passive reconnaissance.

DNetcraftCorrect

Netcraft is a web-based reconnaissance service that performs passive footprinting by querying its own historical database to reveal a target's web server software, hosting history, uptime records, and SSL certificate details. Because the investigator queries Netcraft's servers rather than the target directly, no traffic is sent to the target organization. This makes it a true passive reconnaissance tool suitable for stealthy information gathering.

Concept tested: Passive footprinting tools and web server reconnaissance

Source: https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/01-Information_Gathering/02-Fingerprint_Web_Server

Topics

#passive footprinting#Netcraft#OSINT#reconnaissance tools

Community Discussion

No community discussion yet for this question.

Full GCIH Practice