A penetration tester who is doing a company-requested assessment would like to send traffic to another system using double tagging. Which of the following techniques would BEST accomplish this goal?

The correct answer is D. Tag nesting. Since vlan hopping requires 2 vlans to be nested in a single packet. Double tagging occurs when an attacker adds and modifies tags on an Ethernet frame to allow the sending of packets through any VLAN. This attack takes advantage of how many switches Most switches will only…

Attacks and Exploits

Question

Options

ARFID cloning
BRFID tagging
CMeta tagging
DTag nesting

How the community answered

(32 responses)

A
6% (2)
B
3% (1)
C
9% (3)
D
81% (26)

Explanation

Since vlan hopping requires 2 vlans to be nested in a single packet. Double tagging occurs when an attacker adds and modifies tags on an Ethernet frame to allow the sending of packets through any VLAN. This attack takes advantage of how many switches Most switches will only remove the outer tag and forward the frame to all native VLAN ports. With that said, this exploit is only successful if the attacker belongs to the native VLAN of the trunk link. https://cybersecurity.att.com/blogs/security-essentials/vlan-hopping-and-mitigation

Topics

#VLAN double tagging#Tag nesting#Network attacks#VLAN hopping

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice