nerdexam
GIAC

GPEN · Question #26

John works as a professional Ethical Hacker. He is assigned a project to test the security of you want to perform the next information-gathering step, i.e., passive OS fingerprinting. Which of the fol

The correct answer is C. P0f. Passive OS fingerprinting identifies a target's operating system by analyzing existing network traffic without sending any probe packets. P0f is the purpose-built tool for this entirely passive technique.

Penetration Testing Foundations & Reconnaissance

Question

John works as a professional Ethical Hacker. He is assigned a project to test the security of you want to perform the next information-gathering step, i.e., passive OS fingerprinting. Which of the following tools can you use to accomplish the task?

Options

  • ASuperscan
  • BNmap
  • CP0f
  • DNBTscan

How the community answered

(28 responses)
  • A
    11% (3)
  • B
    4% (1)
  • C
    82% (23)
  • D
    4% (1)

Why each option

Passive OS fingerprinting identifies a target's operating system by analyzing existing network traffic without sending any probe packets. P0f is the purpose-built tool for this entirely passive technique.

ASuperscan

SuperScan is an active port and service scanner that sends packets to discover open ports, making it an active rather than passive tool.

BNmap

Nmap performs OS fingerprinting actively by sending specially crafted probe packets to the target host, which is the opposite of passive fingerprinting.

CP0fCorrect

P0f works by passively capturing and analyzing packets already present on the network - such as SYN and SYN/ACK packets - without generating any additional traffic of its own. It identifies operating systems by examining subtle differences in TCP/IP stack behavior, such as TTL values, window sizes, and TCP option ordering. This makes it ideal for stealthy reconnaissance because it leaves no trace in target logs.

DNBTscan

NBTscan is used to scan for NetBIOS name information on a network and is not designed for OS fingerprinting.

Concept tested: Passive OS fingerprinting using P0f

Source: https://lcamtuf.coredump.cx/p0f3/

Topics

#passive OS fingerprinting#P0f#reconnaissance tools#information gathering

Community Discussion

No community discussion yet for this question.

Full GPEN Practice