nerdexam
GIAC

GPEN · Question #66

Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary attack?

The correct answer is C. Nessus. Nessus is a vulnerability scanner with built-in capability to invoke Hydra for dictionary-based authentication attacks against discovered services.

Vulnerability Discovery & Scanning

Question

Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary attack?

Options

  • AWhishker
  • BNmap
  • CNessus
  • DSARA

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    12% (3)
  • C
    81% (21)
  • D
    4% (1)

Why each option

Nessus is a vulnerability scanner with built-in capability to invoke Hydra for dictionary-based authentication attacks against discovered services.

AWhishker

Whisker is a CGI script vulnerability scanner focused on enumerating web server scripts and does not integrate with Hydra for dictionary attacks.

BNmap

Nmap is a network port and service discovery tool, not a vulnerability scanner that launches dictionary attacks via Hydra.

CNessusCorrect

Nessus, developed by Tenable, is a comprehensive vulnerability scanner that can call external tools such as Hydra to perform dictionary attacks against network authentication services it identifies during a scan. This integration extends Nessus beyond passive checks into active credential testing, making it uniquely match the description in the question.

DSARA

SARA (Security Auditor's Research Assistant) is a network vulnerability assessment tool but lacks built-in functionality to invoke Hydra for dictionary attacks.

Concept tested: Nessus vulnerability scanner Hydra dictionary attack integration

Source: https://docs.tenable.com/nessus/

Topics

#vulnerability scanning#Nessus#dictionary attack#Hydra

Community Discussion

No community discussion yet for this question.

Full GPEN Practice