NetCat can be used to reveal service information by connecting to a target service to obtain banners.

• A. Harvesting banners or version information from services
• B. Brute-forcing passwords
• C. Exfiltrating data
• D. Disabling services

Answer: (A)

Banner grabbing is the practice of connecting to a service and reading the initial text it presents upon connection. NetCat excels at this because a lot of services send a banner that includes the program name and version, sometimes even the operating system. By establishing a simple TCP connection and watching what the service reveals, you can quickly identify what software is running on open ports and what versions are in use. This information is valuable for planning further testing, as knowing the exact service and version helps target vulnerabilities and craft appropriate checks. Some services do reveal their banner immediately, like SSH or FTP, while others might require sending a specific command to elicit a response. However, this technique is specifically about extracting that identifying information rather than performing other actions. Brute-forcing passwords focuses on credential guessing, exfiltrating data involves stealing data, and disabling services would disrupt operations; none of these are about obtaining the banner or version information from a service.