Which method relies on actively crafting TCP packets to elicit banners from the target's IP stack?

Which method relies on actively crafting TCP packets to elicit banners from the target's IP stack?

• A. Passive Banner Grabbing
• B. Active Banner Grabbing
• C. DNS Enumeration
• D. Port Scanning

Answer: (B)

Active banner grabbing is about actively sending probes to a target to trigger a response that reveals service details, such as the software or version string presented in a banner. By crafting specific TCP packets and directing them to particular ports, you provoke the IP stack to reveal identifying information in its replies. This is different from passive banner grabbing, which only listens to and extracts banners from traffic that is already flowing without initiating any probes. DNS enumeration focuses on querying name servers for domain-related data, not on extracting service banners. Port scanning looks for which ports are open or reachable and does not inherently obtain banners unless combined with additional banner-grabbing steps. So, the method that uses actively crafted TCP packets to elicit banners is Active Banner Grabbing.

Active banner grabbing is about actively sending probes to a target to trigger a response that reveals service details, such as the software or version string presented in a banner. By crafting specific TCP packets and directing them to particular ports, you provoke the IP stack to reveal identifying information in its replies. This is different from passive banner grabbing, which only listens to and extracts banners from traffic that is already flowing without initiating any probes. DNS enumeration focuses on querying name servers for domain-related data, not on extracting service banners. Port scanning looks for which ports are open or reachable and does not inherently obtain banners unless combined with additional banner-grabbing steps. So, the method that uses actively crafted TCP packets to elicit banners is Active Banner Grabbing.