Which tool could a hacker use to create a backdoor on an unpatched system?

Which tool could a hacker use to create a backdoor on an unpatched system?

• A. Metasploit
• B. Wireshark
• C. Nmap
• D. Burp Suite

Answer: (B)

Planting a backdoor on an unpatched system relies on finding a vulnerability and delivering code that gives remote access. A tool that is built to exploit known weaknesses and attach payloads is what enables this kind of post-exploitation activity. Metasploit fits that role exactly: it provides a large collection of exploit modules and payloads that can be used to gain entry and install a backdoor or backdoor-like access (such as a meterpreter session or reverse shell) on systems with unpatched vulnerabilities. This combination of vulnerability exploitation and payload delivery is what makes it the appropriate choice for creating backdoor access in the scenario described. Wireshark, by contrast, is a packet analyzer used to capture and inspect network traffic; it doesn’t install software or deliver payloads. Nmap focuses on discovery and mapping of hosts and services, not on delivering backdoors. Burp Suite is aimed at web application security testing and traffic manipulation, not general backdoor installation on a target machine.

Planting a backdoor on an unpatched system relies on finding a vulnerability and delivering code that gives remote access. A tool that is built to exploit known weaknesses and attach payloads is what enables this kind of post-exploitation activity. Metasploit fits that role exactly: it provides a large collection of exploit modules and payloads that can be used to gain entry and install a backdoor or backdoor-like access (such as a meterpreter session or reverse shell) on systems with unpatched vulnerabilities. This combination of vulnerability exploitation and payload delivery is what makes it the appropriate choice for creating backdoor access in the scenario described.

Wireshark, by contrast, is a packet analyzer used to capture and inspect network traffic; it doesn’t install software or deliver payloads. Nmap focuses on discovery and mapping of hosts and services, not on delivering backdoors. Burp Suite is aimed at web application security testing and traffic manipulation, not general backdoor installation on a target machine.