Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

CompTIA Security+ SY0-601 > Tools > Flashcards

Tools Flashcards

1
Q

hping

A

port scanner that can send out any kind of TCP, UDP, or ICMP packet, or can receive packets from targets. hping3 is current.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

netcat

A

run with nc, very flexible tool. Can open any port on a local system, making the system act like a sandbox. Port scanner as well as port redirector.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

cURL

A

Linux terminal tool enables any form of file transfer. Supports a lot of protocols for file transfer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

theHarvester

A

a program designed to search OSINT for information about domains, with an emphasis on e-mail messages. Very good at finding where domain e-mail messages are used, uses many sources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Sn1per

A

pen testing reconnaissance framework and automated attack tool. works with other popular tools like NMap, Metasploit to gather info about the target. Very powerful.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

scanless

A

a Python 3 command-line utility and library for using Web sites that can perform port scans on your behalf

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

dnsenum

A

DNS enumeration - finds all the DNS servers for a specific domain - important step for many types of pen testing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Cuckoo Sandbox

A

malware analyzer. Run it with a suspicious file, and the program will analyze it for malware. Very powerful and easy to use, is constantly updated for new forms of malware and often more aware than many anti-malware tools

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

tcpreplay

A

pcap file type is the standard way to store and analyze packet captures. tcpreplay enables you to edit and replacy pcap files out to your network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

libpcap

A

Linux packet sniffer, usually installed with the protocol or packet analyzer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

WinPcap

A

Windows packet sniffer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Wireshark

A

most popular protocol analyzer software, works great and is free. Windows and Linux.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

nmap

A

most commonly used network scanner, available for many OS’s. Can detect non-secure hosts on the network, command line and GUI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Nessus

A

network-based vulnerability scanner, can send specially crafted network traffic to a host, can show vulnerabilities like unsecure protocols, weak encryption, open file shares, etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Metasploit

A

A platform for penetration testing by the “good guys”. The go-to tool for pen testing. Incredible powerful and dangerous toolset when used incorrectly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

ping

A

query another system on a TCP/IP network to determine connectivity. Runs 4 times on Windows and stops automatically. Runs continuously in Linux until you press CTRL-C.
-a: Resolve addresses to hostnames
-t: run continuously
-f: Don’t Fragment flag in packet (IPv4)
-4: force using IPv4
-6: Force using IPv6

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

ipconfig

A

Windows utility, show current status of the network settings for a host system.
/all Get exhaustive listing of every IP and Ethernet setting
/release release the DHCP IP address lease
/renew renew the DHCP IP address lease
/flushdns clear the host’s DNS cache
/displaydns Display host’s DNS cache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

ifconfig

A

UNIX/Linux and macOS utility. Show the current status of the network settings for a host system.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

ip

A

Linux utility. IP command replaces ifconfig, doing many of the same tasks like viewing IP info on a system, checking statuses of network connections, managing routing, starting or stopping an ethernet interface. Shorter switch names.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

arp

A

Observe and administer the mapped IPv4-to-Ethernet addresses for the local network. Windows and linux use the same switches. Only for IPv4!
Enables detection of ARP spoofing. provides the MAC address for the spoofing system.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

netstat

A

Windows, Linux tool for getting info needed on the host system’s TCP and UDP connections, status of all open and listening ports, and other items like the routing table.
Shows all active connections between a host and other hosts.
netstat -a adds listening ports. Finding hidden servers or malware on a host.
netstat -b displays executable file making the connection

22
Q

route

A

display and edit a host’s routing table. Enables you to find problems if packets leave your system but don’t get a response. Linux: route
Windows is route print.

23
Q

netcat (nc)

A

uses ‘nc’, Linux terminal program, enables you to make any type of connection and see the results from a command line. primitive tool but can be great for penetration testing or hacking if you know the right commands
Handy scanning command. Can make your system listen on a port number

24
Q

tracert/traceroute

A

Windows = tracert
Linux = traceroute
How packets are routed from a host to an endpoint. These commands send packets to each connection between the host and endpoint, checking the TTL (time to live) between connections.
Running it before there are any problems

25
Q

pathping

A

Windows-only utility. Combination of tracert and ping. Pathping runs a traceroute, then pings each hop 100 times, determines latency accurately, but is slower than tracert. Forces no DNS resolution and requires only IPv4 addresses.

26
Q

TCPView/PingPlotter

A

Graphical tools for things like netstat, ping/traceroute

27
Q

nslookup

A

DNS tool in both Windows and Linux: queries DNS servers (assuming the DNS server is configured to respond) and returns detailed information about any DNS domain. You can run nslookup to ask a DNS server for all the NS (name server) records for any domain. Can be used for evil purposes.

28
Q

dig

A

Linux-based DNS querying tool, many advantages over nslookup. Works with the host’s DNS settings, as opposed to nslookup which ignores the host’s DNS settings. Works well with scripting tools.

29
Q

cat

A

Linux utility that combines (concatenates) files, create files, or view the contents of any text file.

30
Q

chmod

A

enables you to change permissions on Linux for a file or directory.

31
Q

grep

A

looks for search terms, strings, inside text files and returns any line of that text file containing the string you requested.

32
Q

head/tail

A

beginning and ends of text files. First ten lines, last ten lines

33
Q

logger

A

add text to log files manually

34
Q

Powershell

A

Shell environment introduced by Microsoft in 2006, best combination of shell and scripting language, for Windows. Built-in scripting language. Supports Javascript, Python

35
Q

Python

A

go-to scripting language for anything cross-platform

36
Q

SSH

A

Secure Shell protocol, can manifest a terminal to a remote machine, assuming you have a username and password on that remote machine (and its running an SSH-compatible server). Runs on TCP port 22. SSH servers and clients must first create an encrypted connection. SSH server must generate SSH keys, a traditional RSA asymmetric key pair. OpenSSH

37
Q

Angry IP Scanner

A

simple network scanner, uses simple protocols, mainly ping, to query a single IPv4 address or an address range. Good for a single network ID and does some basic port scanning

38
Q

IP Scanner

A

macOS - simple network scanner, uses simplest protocols to query a local network

39
Q

NMap

A

powerful network scanner - the gold standard for TCP/IP network scanners early on, had retained its prominence, updating.
Command-line tool with a powerful and complex number of switches and options.
By default, scans the 1000 most common port numbers by default. can scan an entire network ID. -v increases “verbosity”, more info. Works fine for any public-facing server.

40
Q

Zenmap

A

graphical tool for Zenmap, great GUI.

41
Q

Wireshark

A

protocol analyzer/packet sniffer, developed in 1998, powerful and free and works on all major OSes. default GUI very common. Enables an application programming interface (API) to enable a Network Interface Card (NIC) to ingest all traffic passing by, using the libpcap API in Linux or WinPcap API on Windows.

42
Q

tcpdump

A

Linux protocol analyzer/packet sniffer, older than Wireshark

43
Q

journalctl

A

Linux, displays all logs in a system in a single format. logger

44
Q

syslog

A

complete protocol for the transmission and storage of Linux logs into a single syslog server. once theyre all stored in a single location, can use tools like journalctl to monitor the entire network

45
Q

Simple Network Management Protocol (SNMP)

A

enables proactice monitoring of networkhosts in real time. Is a bandwidth monitor. have an agent isntalled on them that can report certain types of data back to a centralizer monitoring server. Agent is configured with a Management Information Base (MIB)

46
Q

NetFlow/sflow

A

Cisco-based utility that provides real-time information about all the IP traffic in a system. sFlow provides similar info but runs in hardware. NetFlow is software.

47
Q

IPFIX (internet protocol flow information export)

A

spawned from NetFlow version 9, has more flexibility in the types of information that can be combined and saved for analysis. IPFIX is an Internet Engineering Task Force (IETF) specification

48
Q

dig

A

Domain Info Groper - command-line tool in non-Windows systems used to diagnose DNS problems

49
Q

FTK Imager

A

a free tool that can image both systems and memory, can be used on Windows systems… Commercial software suite for analyzing system images and other digital evidence

50
Q

dd

A

Linux and macOS terminal command used to create full disk images

CompTIA Security+ SY0-601 (13 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions