nerdexam
GIAC

GPEN · Question #327

You work as a Network Penetration tester in the Secure Inc. Your company takes the projects to test the security of various companies. Recently, Secure Inc. has assigned you a project to test the…

The correct answer is A. Ettercap. Ettercap is a network sniffer and man-in-the-middle framework capable of capturing cleartext FTP credentials from live network traffic.

Exploitation & Post-Exploitation Techniques

Question

You work as a Network Penetration tester in the Secure Inc. Your company takes the projects to test the security of various companies. Recently, Secure Inc. has assigned you a project to test the security of the Bluehill Inc. For this, you start monitoring the network traffic of the Bluehill Inc. In this process, you get that there are too many FTP packets traveling in the Bluehill Inc. network. Now, you want to sniff the traffic and extract usernames and passwords of the FTP server. Which of the following tools will you use to accomplish the task?

Options

  • AEttercap
  • BL0phtcrack
  • CNetStumbler
  • DSARA

How the community answered

(16 responses)
  • A
    81% (13)
  • C
    6% (1)
  • D
    13% (2)

Why each option

Ettercap is a network sniffer and man-in-the-middle framework capable of capturing cleartext FTP credentials from live network traffic.

AEttercapCorrect

Ettercap supports active and passive protocol dissection for many protocols including FTP, which transmits usernames and passwords in cleartext. It can use ARP poisoning to intercept traffic on switched networks, making it ideal for sniffing FTP sessions and extracting credentials from the captured packets in real time.

BL0phtcrack

L0phtCrack is a Windows password auditing and hash-cracking tool targeting NTLM/LM hashes, not a live network traffic sniffer.

CNetStumbler

NetStumbler is a wireless access point discovery tool used for detecting Wi-Fi networks and is not capable of sniffing or analyzing wired FTP session traffic.

DSARA

SARA (Security Auditor's Research Assistant) is a network vulnerability scanner that identifies host weaknesses, not a tool for live traffic capture or credential extraction.

Concept tested: FTP credential sniffing using Ettercap man-in-the-middle

Source: https://www.ettercap-project.org/documentation.html

Topics

#Ettercap#FTP sniffing#credential capture#network sniffing

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GPEN Practice