ExamGecko
Question list
Search
Search

Related questions











Question 270 - 312-50v12 discussion

Report
Export

In order to tailor your tests during a web-application scan, you decide to determine which webserver version is hosting the application. On using the sV flag with Nmap. you obtain the following response:

80/tcp open http-proxy Apache Server 7.1.6what Information-gathering technique does this best describe?

A.
WhOiS lookup
Answers
A.
WhOiS lookup
B.
Banner grabbing
Answers
B.
Banner grabbing
C.
Dictionary attack
Answers
C.
Dictionary attack
D.
Brute forcing
Answers
D.
Brute forcing
Suggested answer: B

Explanation:

Banner grabbing is a technique wont to gain info about a computer system on a network and the services running on its open ports. administrators will use this to take inventory of the systems and services on their network. However, an to find will use banner grabbing so as to search out network hosts that are running versions of applications and operating systems with known exploits.

Some samples of service ports used for banner grabbing are those used by Hyper Text Transfer Protocol (HTTP), File Transfer Protocol (FTP), and Simple Mail Transfer Protocol (SMTP); ports 80, 21, and 25 severally. Tools normally used to perform banner grabbing are Telnet, nmap and Netcat.

For example, one may establish a connection to a target internet server using Netcat, then send an HTTP request. The response can usually contain info about the service running on the host:

This information may be used by an administrator to catalog this system, or by an intruder to narrow down a list of applicable exploits.

To prevent this, network administrators should restrict access to services on their networks and shut down unused or unnecessary services running on network hosts. Shodan is a search engine for banners grabbed from portscanning the

Internet.

asked 18/09/2024
Charles Marlin
36 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first