Free GIAC GPEN Exam Dumps Questions & Answers

Which of the following tools can be used to automate the MITM attack?

• A.  Hotspotter
• B.  Kismet
• C.  IKECrack
• D.  Airjack

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He has successfully completed the following pre-attack phases while testing the security of the server:
Footprinting Scanning Now he wants to conduct the enumeration phase.
Which of the following tools can John use to conduct it?
Each correct answer represents a complete solution. Choose all that apply.

• A.  WinSSLMiM
• B.  PsPasswd
• C.  UserInfo
• D.  PsFile

Which of the following tools can be used for session splicing attacks?

• A.  APNIC
• B.  Whisker
• C.  ARIN
• D.  ADMutate

Which of the following tasks is NOT performed into the enumeration phase?

• A.  Injecting a backdoor to the remote computer to gain access in it remotely
• B.  Discovering NetBIOS names
• C.  Obtaining Active Directory information and identifying vulnerable user accounts
• D.  Establishing NULL sessions and queries

While performing an assessment on a banking site, you discover the following link:
hnps://mybank.com/xfer.aspMer_toMaccount_number]&amount-[dollars] Assuming authenticated banking users can be lured to your web site, which crafted html tag may be used to launch a XSRF attack?

• A.  <imgsrc-"java script alert (`document cookie'):">
• B.  <scripr>document.\write('hTtp$://mybankxom/xfer.a$p?xfer_to-[attacker.accountl &amount-
  [dollars)</script>
• C.  <scripi>alert('hnps:/'mybank.com/xfer.a$p?xfer_io-[attacker_account]&amoutn-
  [dollars]')</script>
• D.  <img src-'https/mybank.com/xfer.asp?xfer_to=[artacker_account]&amount= [dollars]">