GPEN · Question #170
You work as a Penetration Tester for the Infosec Inc. Your company takes the projects of security auditing. Recently, your company has assigned you a project to test the security of the we…
The correct answer is D. The we-are-secure.com server is using a TCP wrapper. TCP wrappers on Linux intercept service connections and can silently drop or restrict output based on access control rules, resulting in a blank or unresponsive telnet session.
Question
You work as a Penetration Tester for the Infosec Inc. Your company takes the projects of security auditing. Recently, your company has assigned you a project to test the security of the we- aresecure. com Website. The we-are-secure.com Web server is using Linux operating system. When you port scanned the we-are-secure.com Web server, you got that TCP port 23, 25, and 53 are open. When you tried to telnet to port 23, you got a blank screen in response. When you tried to type the dir, copy, date, del, etc. commands you got only blank spaces or underscores symbols on the screen. What may be the reason of such unwanted situation?
Options
- AThe we-are-secure.com server is using honeypot.
- BThe telnet session is being affected by the stateful inspection firewall.
- CThe telnet service of we-are-secure.com has corrupted.
- DThe we-are-secure.com server is using a TCP wrapper.
How the community answered
(19 responses)- A5% (1)
- B5% (1)
- C5% (1)
- D84% (16)
Why each option
TCP wrappers on Linux intercept service connections and can silently drop or restrict output based on access control rules, resulting in a blank or unresponsive telnet session.
A honeypot would typically simulate a realistic shell environment with convincing responses to commands to gather attacker intelligence, not return blank spaces.
A stateful inspection firewall would block or drop the connection entirely rather than allowing the telnet session to establish and then return blank output.
A corrupted telnet service would most likely produce error messages, connection resets, or service unavailability rather than a connected session with blank command responses.
TCP wrappers (tcpd) use hosts.allow and hosts.deny rules to control access to network services on Linux systems. When a connection is allowed but the wrapper is configured to restrict interaction or spawn a trap, the session connects but returns blank output or underscores instead of a normal shell prompt. This behavior is a classic indicator of TCP wrapper access controls filtering the session without terminating it outright.
Concept tested: TCP wrappers access control behavior on Linux
Source: https://linux.die.net/man/8/tcpd
Topics
Community Discussion
No community discussion yet for this question.