A penetration tester is trying to bypass an active response tool that blocks IP addresses that have more than 100 connections per minute. Which of the following commands would allow the tester to…

The correct answer is B. nmap -p 22, 25, 80, 3389 -T2 10.0.0.15 -Pn. The -T2 flag in Nmap sets the timing template to "polite", which means that Nmap will limit the number of parallel probes to 10 and the scan delay to 0.4 seconds. This will reduce the number of connections per minute and avoid triggering the active response tool. The -Pn flag…

Attacks and Exploits

Question

A penetration tester is trying to bypass an active response tool that blocks IP addresses that have more than 100 connections per minute. Which of the following commands would allow the tester to finish the test without being blocked?

Options

Anmap -sU -p 1-1024 10.0.0.15
Bnmap -p 22, 25, 80, 3389 -T2 10.0.0.15 -Pn
Cnmap -T5 -p 1-65535 -A 10.0.0.15
Dnmap -T3 -F 10.0.0.15

How the community answered

(33 responses)

A
9% (3)
B
85% (28)
C
3% (1)
D
3% (1)

Explanation

The -T2 flag in Nmap sets the timing template to "polite", which means that Nmap will limit the number of parallel probes to 10 and the scan delay to 0.4 seconds. This will reduce the number of connections per minute and avoid triggering the active response tool. The -Pn flag tells Nmap to skip the host discovery phase and scan the target regardless of its ping response. The other options are not suitable for bypassing the active response tool, as they either scan too many ports (-sU, -T5, -F) or use a faster timing template (-T5, -T3) that will generate more connections

Topics

#Nmap#Evasion#Rate Limiting Bypass#Active Response Tool

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice