nerdexam
GIAC

GPEN · Question #131

Which of the following tools are used for footprinting? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is B. Sam spade C. Whois D. Traceroute. Footprinting involves passively and actively gathering information about a target network; Sam Spade, Whois, and Traceroute are classic footprinting tools, while Brutus is an active password-cracking tool.

Penetration Testing Foundations & Reconnaissance

Question

Which of the following tools are used for footprinting? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ABrutus
  • BSam spade
  • CWhois
  • DTraceroute

How the community answered

(39 responses)
  • A
    28% (11)
  • B
    72% (28)

Why each option

Footprinting involves passively and actively gathering information about a target network; Sam Spade, Whois, and Traceroute are classic footprinting tools, while Brutus is an active password-cracking tool.

ABrutus

Brutus is an online password-cracking and brute-force authentication tool targeting services like HTTP, FTP, and Telnet; it is an active attack tool used after reconnaissance, not a footprinting tool.

BSam spadeCorrect

Sam Spade is a multi-function network investigation tool used during footprinting to perform DNS lookups, WHOIS queries, ping, traceroute, and SMTP checks, providing a broad reconnaissance profile of a target.

CWhoisCorrect

Whois queries domain registrar databases to retrieve registration details, contact information, and name server records, making it a fundamental footprinting tool for passive information gathering.

DTracerouteCorrect

Traceroute maps the network path and identifies intermediate routers between the attacker and target, revealing network topology and infrastructure details used in the footprinting phase.

Concept tested: Footprinting tools identification and classification

Source: https://owasp.org/www-project-web-security-testing-guide/stable/6-Appendix/C-Fuzz_Vectors

Topics

#footprinting#OSINT#Whois#Traceroute

Community Discussion

No community discussion yet for this question.

Full GPEN Practice