Question
During a security assessment, a penetration tester uses a tool to capture plaintext log-in credentials on the communication between a user and an authentication system. The tester wants to use this information for further unauthorized access. Which of the following tools is the tester using?
- A. Burp Suite
- B. Wireshark Correct
- C. Zed Attack Proxy
- D. Metasploit
Explanation
Wireshark captures packets passively on the network, so it can read credentials sent in plaintext (for example over HTTP, FTP or Telnet) between a user and an authentication server. Burp Suite and Zed Attack Proxy are intercepting web proxies that see only traffic routed through them by a browser, not arbitrary communication between a user and a system. Metasploit is an exploitation framework, not a traffic capture tool.
