What tool should be used to perform a Blackjacking attack?

• A. Ettercap
• B. Nmap
• C. Wireshark
• D. BBProxy

Answer: (D)

Blackjacking is a social engineering approach that targets people in physical spaces by posing as a legitimate service or device to capture credentials or gain access. To pull this off, you need a tool that can sit between the victim and the service they think they’re using, typically by acting as a rogue proxy. BBProxy is designed for this role: it provides a portable proxy framework you can deploy during a social-engineering engagement to relay or intercept traffic, capture login data, or present convincing prompts to the user. That direct ability to position itself between the victim and the intended service makes it the most suitable tool for a Blackjacking attack.

Ettercap, while capable of man-in-the-middle attacks on a LAN, is more about network-level interception in a wired/wireless environment rather than a targeted, physical-space social-engineering scenario. Nmap is a discovery and mapping tool, not involved in credential capture or deception. Wireshark is a packet analyzer used for observing traffic, not for conducting the deception and interception that Blackjacking relies on.