Exam (elaborations)
SANS SEC504 Tools - 2020 Questions & answers
SANS SEC504 Tools - 2020 Questions & answers
[Show more]
Content preview
SANS SEC504 Tools - 202012Whois - CORRECT ANSWER-Web service for retrieving historical whois
information. Costs $1/lookup
Acunetix Web Vulnerability Scanner - CORRECT ANSWER-Acunetix Web
Vulnerability Scanner is a complete web application security testing solution that
can be used both standalone and as part of complex environments. It offers
built-in vulnerability assessment and vulnerability management. (Remember
these in LR logs...)
Aircrack-ng - CORRECT ANSWER-Aircrack-ng is a Wi-Fi network attack tool,
targeting WEP and WPA-PSK/WPA2-PSK networks.
Airdecap-ng - CORRECT ANSWER-Part of Aircrack-ng, decrypt the packets from
a Wi-Fi WEP or WPA-PSK/WPA2-PSK packet capture following key recovery.
Anki - CORRECT ANSWER-Anki is a flexible flash card system that applies
spaced repetition theory for improved long-term retention development.
BCDedit - CORRECT ANSWER-BCDEdit is a Windows command line tool for
managing Boot Configuration Data (BCD). BCD files provide a store that is used
to describe boot applications and boot application settings. BCDEdit can be used
for a variety of purposes, including creating new stores, modifying existing stores,
adding boot menu options, and so on.
Beats - CORRECT ANSWER-Server-side tools for ingesting and shipping data to
identified sources (commonly Elasticsearch; faster and less complex than
Logstash but less functional). Includes Filebeat, Packetbeat, Winlogbeat, and
others.
BeEF - CORRECT ANSWER-The Browser Exploitation Framework is a suite of
tools for exploiting vulnerabilities in browsers delivered through several attack
vectors. Modular XSS hook. Browser exploitation framework
, Bettercap - CORRECT ANSWER-Bettercap is a multi-functional attack took that
targets Wi-Fi, Bluetooth Low Energy, wireless keyboards, and Ethernet networks
through reconnaissance, injection, and MITM attacks. Automatically discovers
targets and ARP poisons + extras.
Bloodhound - CORRECT ANSWER-Bloodhound graphically maps the
relationships to systems, permissions on those systems, and the permissions of
the users logged onto those systems to help an attacker identify the most direct
route to elevating the permissions of the system they have access to into a
domain admin account.
Burp Proxy - CORRECT ANSWER-Cross-platform web proxy for inspecting and
attacking web sites and clients. Web App Attack Proxies, auto regex alteration of
HTTP
Certificate Transparency Search - CORRECT ANSWER-Examine certificate
registration data for host and system discovery.
Certutil - CORRECT ANSWER-Certutil is a utility that ships with Windows for
managing certificates. Certutil can also download content from an arbitrary URL,
can encode and decode base64 data, and can calculate hashes.
Crazyradio PA - CORRECT ANSWER-Hardware tool for wireless keyboard and
mouse keystroke sniffing and injection attacks.
Curl - CORRECT ANSWER-cURL is a library and command line tool for
transferring data using various network protocols, including HTTP, HTTPS, FTP,
and more.
Cyber Chef - CORRECT ANSWER-The Cyber Swiss Army Knife; a web app for
encryption, encoding, compression and data analysis.
CyberCPR - CORRECT ANSWER-CyberCPR is an incident response and case
management built with a focus on security and need-to-know information
disclosure enforcement by SANS instructor Steve Armstrong. Incident Tracking.
Web app that tracks incidents, systems, and evidence
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller EXAMQA. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for CA$15.08. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
80364 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now