Manipulating TCP Header Length and Checksum - CompTIA PenTest+ Exam
Question
A security professional wants to test an IoT device by sending an invalid packet to a proprietary service listening on TCP port 3011
Which of the following would allow the security professional to easily and programmatically manipulate the TCP header length and checksum using arbitrary numbers and to observe how the proprietary service responds?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.A.
https://www.mn.uio.no/ifi/english/research/groups/psy/completedmasters/2017/Kim_Jonatan_Wessel_Bjorneset/The best tool to manipulate the TCP header length and checksum using arbitrary numbers and to observe how the proprietary service responds is Scapy (option C).
Nmap (option A) is a network scanning tool that can be used to discover hosts and services on a network, but it does not provide the level of packet manipulation that Scapy does.
Tcpdump (option B) is a packet analyzer that can be used to capture and analyze network traffic, but it does not provide the level of packet manipulation that Scapy does.
Hping3 (option D) is a network tool that can send custom TCP/IP packets and display the replies, but it does not provide the level of flexibility and versatility that Scapy does.
Scapy is a Python-based packet manipulation tool that allows users to craft and send packets of various protocols, including TCP. With Scapy, a security professional can easily and programmatically manipulate the TCP header length and checksum using arbitrary numbers, and observe how the proprietary service responds. Scapy provides a flexible and powerful framework for testing and analyzing network protocols, making it an ideal choice for this scenario.
