GPEN · Question #129
Which of the following tools can be used to enumerate networks that have blocked ICMP Echo packets, however, failed to block timestamp or information packet or not performing sniffing of trusted addre
The correct answer is C. Icmpenum. Icmpenum is a specialized ICMP enumeration tool that goes beyond echo requests by leveraging timestamp and information request packets, making it effective against firewalls that only block ICMP echo.
Question
Which of the following tools can be used to enumerate networks that have blocked ICMP Echo packets, however, failed to block timestamp or information packet or not performing sniffing of trusted addresses, and it also supports spoofing and promiscuous listening for reply packets?
Options
- ANmap
- BZenmap
- CIcmpenum
- DNessus
How the community answered
(35 responses)- A20% (7)
- B3% (1)
- C71% (25)
- D6% (2)
Why each option
Icmpenum is a specialized ICMP enumeration tool that goes beyond echo requests by leveraging timestamp and information request packets, making it effective against firewalls that only block ICMP echo.
Nmap is a general-purpose port and host scanner that primarily relies on ICMP echo and TCP/UDP probes; it does not specialize in ICMP timestamp/information enumeration with built-in spoofing for this specific bypass technique.
Zenmap is simply the graphical front-end for Nmap and inherits the same capabilities and limitations, so it does not provide the specialized ICMP timestamp/information enumeration described.
Icmpenum specifically targets networks that block ICMP echo (ping) by using alternative ICMP types such as timestamp requests (type 13) and information requests (type 15). It also supports source address spoofing and promiscuous listening, allowing it to gather responses even in restrictive environments. This combination of capabilities makes it uniquely suited for the scenario described.
Nessus is a vulnerability scanner focused on identifying security weaknesses in services and configurations, not a network enumeration tool using alternative ICMP packet types.
Concept tested: ICMP-based network enumeration bypassing echo blocks
Source: https://www.kali.org/tools/icmpenum/
Topics
Community Discussion
No community discussion yet for this question.