PT0-002 · Question #364
PT0-002 Question #364: Real Exam Question with Answer & Explanation
The correct answer is B: Impacket. Impacket is a collection of Python classes designed for programmatic access and interaction with various network protocols. It is widely used in penetration testing for its robust capabilities in working with protocols like SMB, MSRPC, and Kerberos.
Question
Which of the following tools provides Python classes for interacting with network protocols?
Options
- AResponder
- BImpacket
- CEmpire
- DPowerSploit
Explanation
Impacket is a collection of Python classes designed for programmatic access and interaction with various network protocols. It is widely used in penetration testing for its robust capabilities in working with protocols like SMB, MSRPC, and Kerberos.
Common mistakes.
- A. Responder is a tool used for LLMNR, NBT-NS, and mDNS poisoning, often to capture NTLMv1/v2 hashes, rather than providing Python classes for general network protocol interaction.
- C. Empire is a post-exploitation framework written in Python, but its primary function is command and control, not providing general Python classes for network protocol interaction.
- D. PowerSploit is a collection of Microsoft PowerShell modules for penetration testers, primarily focused on Windows post-exploitation, not Python classes for network protocols.
Concept tested. Penetration testing tools - Impacket
Reference. https://github.com/SecureAuthCorp/impacket
Topics
Community Discussion
No community discussion yet for this question.