Which of the following Trojans does not use TCP protocol?

The correct answer is C. Back Oriffice. Back Orifice communicates over UDP by default, unlike most other common Trojans and RATs which rely on TCP.

Exploitation & Post-Exploitation Techniques

Question

Options

ADonald Dick
BBeast
CBack Oriffice
DNetBus

How the community answered

(43 responses)

A
9% (4)
B
2% (1)
C
84% (36)
D
5% (2)

Why each option

Back Orifice communicates over UDP by default, unlike most other common Trojans and RATs which rely on TCP.

ADonald Dick

Donald Dick is a TCP-based RAT that uses TCP for its command-and-control communications.

BBeast

Beast Trojan communicates over TCP, listening on port 6666 by default.

CBack OrifficeCorrect

Back Orifice uses UDP port 31337 by default rather than TCP, which was a deliberate design choice that can help it evade TCP-focused firewall rules and packet filters. This UDP-based communication distinguishes it from most other RATs and makes detection with standard TCP monitoring tools more difficult.

DNetBus

NetBus communicates over TCP, using ports 12345 and 12346 by default.

Concept tested: Trojan transport protocol identification UDP vs TCP

Topics

#Back Orifice#UDP Trojan#remote access Trojan#protocol selection

Community Discussion

No community discussion yet for this question.

Full GPEN Practice