nerdexam
GIAC

GPEN · Question #304

Which of the following tools crashes computers running Windows 2000/XP/NT by sending crafted SMB requests?

The correct answer is C. SMBDie. SMBDie is a denial-of-service tool that crashes Windows NT/2000/XP systems by sending specially crafted malformed SMB protocol requests.

Exploitation & Post-Exploitation Techniques

Question

Which of the following tools crashes computers running Windows 2000/XP/NT by sending crafted SMB requests?

Options

  • ANBTdeputy
  • BSMBGrind
  • CSMBDie
  • DSamdump

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    10% (2)
  • C
    85% (17)

Why each option

SMBDie is a denial-of-service tool that crashes Windows NT/2000/XP systems by sending specially crafted malformed SMB protocol requests.

ANBTdeputy

NBTdeputy is a NetBIOS Name Service tool used to respond to NBT name queries on a network, not a tool for crashing systems via malformed SMB packets.

BSMBGrind

SMBGrind is not the recognized tool associated with crashing Windows NT/2000/XP systems through crafted SMB requests in this context.

CSMBDieCorrect

SMBDie targets the SMB service on Windows NT, 2000, and XP by sending crafted, malformed SMB packets that the operating system cannot properly handle, triggering a Blue Screen of Death. The tool exploits improper input validation in the Windows SMB implementation, causing affected systems to crash without requiring authentication. It became a well-known denial-of-service tool specifically associated with these legacy Windows versions and the vulnerabilities in their SMB stack.

DSamdump

Samdump is a credential extraction utility used to dump NTLM password hashes from the Windows SAM database, serving an entirely different purpose than denial-of-service attacks.

Concept tested: SMB denial-of-service tool targeting legacy Windows versions

Topics

#SMB exploitation#SMBDie#Windows vulnerability#denial of service

Community Discussion

No community discussion yet for this question.

Full GPEN Practice