SANS SEC504 Tools UPDATED Exam
Questions and CORRECT Answers
12Whois - CORRECT ANSWER - Web service for retrieving historical whois
information. Costs $1/lookup
Acunetix Web Vulnerability Scanner - CORRECT ANSWER - Acunetix Web
Vulnerability Scanner is a complete web application security testing solution that can be used
both standalone and as part of complex environments. It offers built-in vulnerability assessment
and vulnerability management. (Remember these in LR logs...)
Aircrack-ng - CORRECT ANSWER - Aircrack-ng is a Wi-Fi network attack tool, targeting
WEP and WPA-PSK/WPA2-PSK networks.
Airdecap-ng - CORRECT ANSWER - Part of Aircrack-ng, decrypt the packets from a Wi-
Fi WEP or WPA-PSK/WPA2-PSK packet capture following key recovery.
Anki - CORRECT ANSWER - Anki is a flexible flash card system that applies spaced
repetition theory for improved long-term retention development.
BCDedit - CORRECT ANSWER - BCDEdit is a Windows command line tool for
managing Boot Configuration Data (BCD). BCD files provide a store that is used to describe
boot applications and boot application settings. BCDEdit can be used for a variety of purposes,
including creating new stores, modifying existing stores, adding boot menu options, and so on.
Beats - CORRECT ANSWER - Server-side tools for ingesting and shipping data to
identified sources (commonly Elasticsearch; faster and less complex than Logstash but less
functional). Includes Filebeat, Packetbeat, Winlogbeat, and others.
BeEF - CORRECT ANSWER - The Browser Exploitation Framework is a suite of tools
for exploiting vulnerabilities in browsers delivered through several attack vectors. Modular XSS
hook. Browser exploitation framework
, Bettercap - CORRECT ANSWER - Bettercap is a multi-functional attack took that targets
Wi-Fi, Bluetooth Low Energy, wireless keyboards, and Ethernet networks through
reconnaissance, injection, and MITM attacks. Automatically discovers targets and ARP poisons
+ extras.
Bloodhound - CORRECT ANSWER - Bloodhound graphically maps the relationships to
systems, permissions on those systems, and the permissions of the users logged onto those
systems to help an attacker identify the most direct route to elevating the permissions of the
system they have access to into a domain admin account.
Burp Proxy - CORRECT ANSWER - Cross-platform web proxy for inspecting and
attacking web sites and clients. Web App Attack Proxies, auto regex alteration of HTTP
Certificate Transparency Search - CORRECT ANSWER - Examine certificate registration
data for host and system discovery.
Certutil - CORRECT ANSWER - Certutil is a utility that ships with Windows for
managing certificates. Certutil can also download content from an arbitrary URL, can encode
and decode base64 data, and can calculate hashes.
Crazyradio PA - CORRECT ANSWER - Hardware tool for wireless keyboard and mouse
keystroke sniffing and injection attacks.
Curl - CORRECT ANSWER - cURL is a library and command line tool for transferring
data using various network protocols, including HTTP, HTTPS, FTP, and more.
Cyber Chef - CORRECT ANSWER - The Cyber Swiss Army Knife; a web app for
encryption, encoding, compression and data analysis.
CyberCPR - CORRECT ANSWER - CyberCPR is an incident response and case
management built with a focus on security and need-to-know information disclosure
Questions and CORRECT Answers
12Whois - CORRECT ANSWER - Web service for retrieving historical whois
information. Costs $1/lookup
Acunetix Web Vulnerability Scanner - CORRECT ANSWER - Acunetix Web
Vulnerability Scanner is a complete web application security testing solution that can be used
both standalone and as part of complex environments. It offers built-in vulnerability assessment
and vulnerability management. (Remember these in LR logs...)
Aircrack-ng - CORRECT ANSWER - Aircrack-ng is a Wi-Fi network attack tool, targeting
WEP and WPA-PSK/WPA2-PSK networks.
Airdecap-ng - CORRECT ANSWER - Part of Aircrack-ng, decrypt the packets from a Wi-
Fi WEP or WPA-PSK/WPA2-PSK packet capture following key recovery.
Anki - CORRECT ANSWER - Anki is a flexible flash card system that applies spaced
repetition theory for improved long-term retention development.
BCDedit - CORRECT ANSWER - BCDEdit is a Windows command line tool for
managing Boot Configuration Data (BCD). BCD files provide a store that is used to describe
boot applications and boot application settings. BCDEdit can be used for a variety of purposes,
including creating new stores, modifying existing stores, adding boot menu options, and so on.
Beats - CORRECT ANSWER - Server-side tools for ingesting and shipping data to
identified sources (commonly Elasticsearch; faster and less complex than Logstash but less
functional). Includes Filebeat, Packetbeat, Winlogbeat, and others.
BeEF - CORRECT ANSWER - The Browser Exploitation Framework is a suite of tools
for exploiting vulnerabilities in browsers delivered through several attack vectors. Modular XSS
hook. Browser exploitation framework
, Bettercap - CORRECT ANSWER - Bettercap is a multi-functional attack took that targets
Wi-Fi, Bluetooth Low Energy, wireless keyboards, and Ethernet networks through
reconnaissance, injection, and MITM attacks. Automatically discovers targets and ARP poisons
+ extras.
Bloodhound - CORRECT ANSWER - Bloodhound graphically maps the relationships to
systems, permissions on those systems, and the permissions of the users logged onto those
systems to help an attacker identify the most direct route to elevating the permissions of the
system they have access to into a domain admin account.
Burp Proxy - CORRECT ANSWER - Cross-platform web proxy for inspecting and
attacking web sites and clients. Web App Attack Proxies, auto regex alteration of HTTP
Certificate Transparency Search - CORRECT ANSWER - Examine certificate registration
data for host and system discovery.
Certutil - CORRECT ANSWER - Certutil is a utility that ships with Windows for
managing certificates. Certutil can also download content from an arbitrary URL, can encode
and decode base64 data, and can calculate hashes.
Crazyradio PA - CORRECT ANSWER - Hardware tool for wireless keyboard and mouse
keystroke sniffing and injection attacks.
Curl - CORRECT ANSWER - cURL is a library and command line tool for transferring
data using various network protocols, including HTTP, HTTPS, FTP, and more.
Cyber Chef - CORRECT ANSWER - The Cyber Swiss Army Knife; a web app for
encryption, encoding, compression and data analysis.
CyberCPR - CORRECT ANSWER - CyberCPR is an incident response and case
management built with a focus on security and need-to-know information disclosure
