Recon Tools

Question 1

Windows cmd to map the entire path of a packet

Answer 1

tracert

Question 2

Linux/OS/Unix cmd to map the entire path of a packet.

Answer 2

traceroute

Question 3

query information from DNS servers(deprecated).

Answer 3

nslookup

Question 4

modern cmd to query information from DNS servers

Answer 4

dig

Question 5

TCP/IP adapter information for Windows.

Answer 5

ipconfig, ipconfig /all for detailed info

Question 6

TCP/IP adapter information for linux/OS

Answer 6

ifconfig

Question 7

ICMP protocol to test for reachability, roundtrip time, ttl, and icmp sequence.

Answer 7

ping

Question 8

Windows cmd that combines tracrt and ping

Answer 8

pathping

Question 9

network statistics to show all information

Answer 9

netstat -a

Question 10

network statistics to show windows binaries

Answer 10

netstat -b

Question 11

network statistics showing ip addresses only without names

Answer 11

netstat -n

Question 12

view local arp table (ip address, mac address, and type(static/dynamic)

Answer 12

arp -a

Question 13

view next route/hop (Windows)

Answer 13

route print

Question 14

view next route/hop (Linux/OS)

Answer 14

netstat -r

Question 15

grabs raw html data from a url and displays in a terminal screen.

Answer 15

curl, client url

Question 16

Two examples of IP scanners that also display port information.

Answer 16

nmap and hping

Question 17

OSint tool that scrapes public information from Bing or Google.

Answer 17

theHarvester

Question 18

Combines multiple recon tools into a single framework and returns a single query.

Answer 18

sn1per

Question 19

Runs port scans from a different host; hides user/client ip information

Answer 19

scanless

Question 20

view host information from dns servers.

Answer 20

dnsenum, dns enumerate

Question 21

vulnerability scanner. identifies known vulnerabilities on systems before they can be exploited.

Answer 21

Nessus

Question 22

a sandbox for malware. Test a file in a safe environment.

Answer 22

Cuckoo

Question 23

most common packet analyzer

Answer 23

Wireshark

Question 24

packet analyzer from the command line

Answer 24

tcpdump

Question 25

used to create a bit by bit copy of a drive or directory

Answer 25

dd (data definition)

Question 26

copy information in system memory to the output stream.

Answer 26

memdump

Question 27

windows universal hexadecimal editor. Can clone disks, secure wipe, etc.

Answer 27

Winhex

Question 28

performs digital forensics on a hard drive, smart phones. View and recover data

Answer 28

autopsy