Which of the following tools is described below? It is a set of tools that are used for sniffing
passwords, e-mail, and HTTP traffic. Some of its tools include arpredirect, macof, tcpkill, tcpnice,
filesnarf, and mailsnarf. It is highly effective for sniffing both switched and shared networks. It uses
the arpredirect and macof tools for switching across switched networks. It can also be used to
capture authentication information for FTP, telnet, SMTP, HTTP, POP, NNTP, IMAP,
etc.
A.
Dsniff
B.
Cain
C.
Libnids
D.
LIDS
Explanation:
Dsniff is a set of tools that are used for sniffing passwords, e-mail, and HTTP traffic. Some of the
tools of Dsniff include dsniff, arpredirect, macof, tcpkill, tcpnice, filesnarf, and mailsnarf. Dsniff is
highly effective for sniffing both switched and shared networks. It uses the arpredirect and macof
tools for switching across switched networks. It can also be used to capture authentication
information for FTP, telnet, SMTP, HTTP, POP, NNTP, IMAP, etc.
Answer option B is incorrect. Cain is a multipurpose tool that can be used to perform many tasks
such as Windows password cracking, Windows enumeration, and VoIP session sniffing. This
password cracking program can perform the following types of password cracking attacks:
Dictionary attack
Brute force attack
Rainbow attack
Hybrid attack
Answer options D and C are incorrect. These tools are port scan detection tools that are used in
the Linux operating system.