PT0-001 · Question #166
A penetration tester is using the Onesixtyone tool on Kali Linux to try to exploit the SNMP protocol on a target that has SNMP enabled Which of the following types of attacks is the penetration…
The correct answer is C. Dictionary-based attack. Onesixtyone is an SNMP brute-force scanner that tests community strings from a wordlist against SNMP-enabled targets, making this a dictionary-based attack.
Question
A penetration tester is using the Onesixtyone tool on Kali Linux to try to exploit the SNMP protocol on a target that has SNMP enabled Which of the following types of attacks is the penetration tester performing?
Options
- ABuffer overflow attack
- BMan-in-the-middle attack
- CDictionary-based attack
- DName resolution attack
How the community answered
(44 responses)- B2% (1)
- C93% (41)
- D5% (2)
Why each option
Onesixtyone is an SNMP brute-force scanner that tests community strings from a wordlist against SNMP-enabled targets, making this a dictionary-based attack.
A buffer overflow attack exploits memory corruption vulnerabilities in software, which is unrelated to how Onesixtyone probes SNMP community strings.
A man-in-the-middle attack intercepts communications between two parties, whereas Onesixtyone directly sends SNMP requests to the target using guessed community strings.
Onesixtyone works by sending SNMP GetRequest packets using community strings taken from a dictionary or wordlist file. It systematically tries each community string to discover valid ones, which is the definition of a dictionary-based attack against SNMP authentication.
A name resolution attack targets DNS or similar naming services to redirect traffic, not the SNMP protocol's community string authentication mechanism.
Concept tested: SNMP community string dictionary brute-force attack
Source: https://www.cisa.gov/uscert/ncas/alerts/TA17-156A
Topics
Community Discussion
No community discussion yet for this question.