nerdexam
CompTIA

PT0-002 · Question #151

A penetration tester conducts an Nmap scan against a target and receives the following results: Which of the following should the tester use to redirect the scanning tools using TCP port 1080 on the…

The correct answer is B. ProxyChains. The Nmap scan results, specifically showing an open TCP port 1080, indicate the presence of a SOCKS proxy service. To route subsequent scanning tools through this proxy, the penetration tester should use ProxyChains.

Information Gathering and Vulnerability Scanning

Question

A penetration tester conducts an Nmap scan against a target and receives the following results:

Which of the following should the tester use to redirect the scanning tools using TCP port 1080 on the target?

Options

  • ANessus
  • BProxyChains
  • COWASP ZAP
  • DEmpire

How the community answered

(41 responses)
  • A
    15% (6)
  • B
    73% (30)
  • C
    5% (2)
  • D
    7% (3)

Why each option

The Nmap scan results, specifically showing an open TCP port 1080, indicate the presence of a SOCKS proxy service. To route subsequent scanning tools through this proxy, the penetration tester should use ProxyChains.

ANessus

Nessus is a vulnerability scanner, not a tool for redirecting network traffic through a proxy.

BProxyChainsCorrect

ProxyChains is a tool designed to force any TCP client application to make its connections through SOCKS (version 4 and 5) or HTTP proxies, effectively routing traffic through the specified proxy server. Since TCP port 1080 is commonly used by SOCKS proxies, ProxyChains would be the appropriate tool to redirect other scanning tools through that open port on the target.

COWASP ZAP

OWASP ZAP (Zed Attack Proxy) is an integrated penetration testing tool for finding vulnerabilities in web applications, typically acting as a proxy for web traffic, but not designed for general tool redirection through a SOCKS proxy.

DEmpire

Empire (specifically PowerShell Empire or Starkiller) is a post-exploitation framework, not a tool for routing general scanning tools through a proxy.

Concept tested: Proxy usage for penetration testing - SOCKS proxy

Topics

#ProxyChains#Traffic Redirection#SOCKS Proxy#Penetration Testing Tools

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice