Which Trojan type can bypass a firewall and operate in reverse using a web-based interface on port 80?

Which Trojan type can bypass a firewall and operate in reverse using a web-based interface on port 80?

• A. HTTP RAT
• B. HTTP/HTTPS Trojans
• C. VNC Trojan
• D. Defacement Trojans

Answer: (B)

The key idea is using web traffic as the channel for control. Trojans that communicate over HTTP or HTTPS can blend in with normal web activity, which helps bypass many firewall rules that block unusual ports. When the infected host reaches out to the attacker’s server over a standard web port (port 80 for HTTP, or 443 for HTTPS) it creates a reverse connection: the victim initiates the contact, and the attacker can then issue commands and receive results through a web-based interface. HTTP/HTTPS Trojans are designed to offer a web-based control panel accessible in a browser, and they can use port 80 (or 443) to keep the traffic look legitimate and under the radar. This combination—web-based UI, standard web ports, and a reverse connection—makes them the best fit for the scenario. Other Trojan types don’t align with a browser-accessible control panel on port 80: VNC-focused trojans rely on VNC protocols, defacement trojans target site content rather than remote control, and HTTP RATs may describe similar behavior but don’t emphasize the web-based interface on port 80 as clearly.

The key idea is using web traffic as the channel for control. Trojans that communicate over HTTP or HTTPS can blend in with normal web activity, which helps bypass many firewall rules that block unusual ports. When the infected host reaches out to the attacker’s server over a standard web port (port 80 for HTTP, or 443 for HTTPS) it creates a reverse connection: the victim initiates the contact, and the attacker can then issue commands and receive results through a web-based interface. HTTP/HTTPS Trojans are designed to offer a web-based control panel accessible in a browser, and they can use port 80 (or 443) to keep the traffic look legitimate and under the radar. This combination—web-based UI, standard web ports, and a reverse connection—makes them the best fit for the scenario. Other Trojan types don’t align with a browser-accessible control panel on port 80: VNC-focused trojans rely on VNC protocols, defacement trojans target site content rather than remote control, and HTTP RATs may describe similar behavior but don’t emphasize the web-based interface on port 80 as clearly.