nerdexam
GIAC

GPEN · Question #161

Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary attack?

The correct answer is D. Nessus. Nessus is a vulnerability scanner that integrates with Hydra to perform dictionary-based password attacks against discovered services as part of its scanning process.

Vulnerability Discovery & Scanning

Question

Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary attack?

Options

  • AWhishker
  • BSARA
  • CNmap
  • DNessus

How the community answered

(62 responses)
  • A
    5% (3)
  • B
    13% (8)
  • C
    8% (5)
  • D
    74% (46)

Why each option

Nessus is a vulnerability scanner that integrates with Hydra to perform dictionary-based password attacks against discovered services as part of its scanning process.

AWhishker

Whisker is a web application vulnerability scanner focused on CGI-based vulnerabilities and does not integrate with Hydra to perform dictionary attacks.

BSARA

SARA (Security Auditor's Research Assistant) is a network vulnerability analysis tool but does not specifically invoke Hydra to conduct dictionary-based credential attacks.

CNmap

Nmap is a network discovery and port scanning tool, not a vulnerability scanner with built-in capability to call Hydra for login attacks.

DNessusCorrect

Nessus is a widely-used vulnerability scanner that includes plugin support to call Hydra, a network login cracker, to launch dictionary attacks against services such as FTP, SSH, and HTTP. This integration lets Nessus test for weak credentials as part of a comprehensive vulnerability assessment, which is a documented capability distinguishing it from other scanners in this list.

Concept tested: Nessus vulnerability scanner integration with Hydra

Source: https://docs.tenable.com/nessus/

Topics

#Nessus#vulnerability scanning#Hydra#dictionary attack

Community Discussion

No community discussion yet for this question.

Full GPEN Practice