GIAC Penetration Tester (GPEN) — Question 49

Which of the following is a tool for SSH and SSL MITM attacks?

Answer options

• A. Ettercap
• B. Cain
• C. Dsniff
• D. AirJack

Correct answer: C

Explanation

Dsniff is specifically designed to facilitate MITM attacks on SSH and SSL by capturing traffic and potentially allowing the attacker to intercept sensitive data. While Ettercap is a general-purpose network sniffer and MITM tool, it is not specifically focused on SSH and SSL like Dsniff. Cain is more associated with password recovery and cracking rather than MITM attacks, and AirJack is primarily used for wireless attacks, making them unsuitable choices.