GPEN · Question #175
You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?
The correct answer is C. Netcraft. Passive footprinting gathers information about a target without sending any traffic directly to it; Netcraft is a passive web-based reconnaissance tool that fits this requirement.
Question
You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?
Options
- AEttercap
- BNmap
- CNetcraft
- DEthereal
How the community answered
(36 responses)- A3% (1)
- B11% (4)
- C81% (29)
- D6% (2)
Why each option
Passive footprinting gathers information about a target without sending any traffic directly to it; Netcraft is a passive web-based reconnaissance tool that fits this requirement.
Ettercap is an active network interception and man-in-the-middle tool used for sniffing live traffic on a LAN, which involves direct interaction with the network and is not passive footprinting.
Nmap is an active port and service scanner that sends probe packets directly to the target host, making it an active reconnaissance tool, not passive.
Netcraft is an online service that provides web server technology lookup, hosting history, SSL certificate details, and uptime data by querying its own continuously collected database - meaning no packets are sent to the target. This makes it a classic passive footprinting tool used in the reconnaissance phase of ethical hacking.
Ethereal (now Wireshark) is a live packet capture and analysis tool that requires active presence on the network segment to capture traffic, which is not passive remote footprinting.
Concept tested: Passive web server footprinting using Netcraft
Source: https://www.netcraft.com/internet-data-mining/
Topics
Community Discussion
No community discussion yet for this question.