nerdexam
GIAC

GPEN · Question #175

You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?

The correct answer is C. Netcraft. Passive footprinting gathers information about a target without sending any traffic directly to it; Netcraft is a passive web-based reconnaissance tool that fits this requirement.

Penetration Testing Foundations & Reconnaissance

Question

You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?

Options

  • AEttercap
  • BNmap
  • CNetcraft
  • DEthereal

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    11% (4)
  • C
    81% (29)
  • D
    6% (2)

Why each option

Passive footprinting gathers information about a target without sending any traffic directly to it; Netcraft is a passive web-based reconnaissance tool that fits this requirement.

AEttercap

Ettercap is an active network interception and man-in-the-middle tool used for sniffing live traffic on a LAN, which involves direct interaction with the network and is not passive footprinting.

BNmap

Nmap is an active port and service scanner that sends probe packets directly to the target host, making it an active reconnaissance tool, not passive.

CNetcraftCorrect

Netcraft is an online service that provides web server technology lookup, hosting history, SSL certificate details, and uptime data by querying its own continuously collected database - meaning no packets are sent to the target. This makes it a classic passive footprinting tool used in the reconnaissance phase of ethical hacking.

DEthereal

Ethereal (now Wireshark) is a live packet capture and analysis tool that requires active presence on the network segment to capture traffic, which is not passive remote footprinting.

Concept tested: Passive web server footprinting using Netcraft

Source: https://www.netcraft.com/internet-data-mining/

Topics

#passive footprinting#Netcraft#OSINT#reconnaissance tools

Community Discussion

No community discussion yet for this question.

Full GPEN Practice