PT0-002 · Question #151
A penetration tester conducts an Nmap scan against a target and receives the following results: Which of the following should the tester use to redirect the scanning tools using TCP port 1080 on the…
The correct answer is B. ProxyChains. The Nmap scan results, specifically showing an open TCP port 1080, indicate the presence of a SOCKS proxy service. To route subsequent scanning tools through this proxy, the penetration tester should use ProxyChains.
Question
A penetration tester conducts an Nmap scan against a target and receives the following results:
Which of the following should the tester use to redirect the scanning tools using TCP port 1080 on the target?
Options
- ANessus
- BProxyChains
- COWASP ZAP
- DEmpire
How the community answered
(41 responses)- A15% (6)
- B73% (30)
- C5% (2)
- D7% (3)
Why each option
The Nmap scan results, specifically showing an open TCP port 1080, indicate the presence of a SOCKS proxy service. To route subsequent scanning tools through this proxy, the penetration tester should use ProxyChains.
Nessus is a vulnerability scanner, not a tool for redirecting network traffic through a proxy.
ProxyChains is a tool designed to force any TCP client application to make its connections through SOCKS (version 4 and 5) or HTTP proxies, effectively routing traffic through the specified proxy server. Since TCP port 1080 is commonly used by SOCKS proxies, ProxyChains would be the appropriate tool to redirect other scanning tools through that open port on the target.
OWASP ZAP (Zed Attack Proxy) is an integrated penetration testing tool for finding vulnerabilities in web applications, typically acting as a proxy for web traffic, but not designed for general tool redirection through a SOCKS proxy.
Empire (specifically PowerShell Empire or Starkiller) is a post-exploitation framework, not a tool for routing general scanning tools through a proxy.
Concept tested: Proxy usage for penetration testing - SOCKS proxy
Topics
Community Discussion
No community discussion yet for this question.