CVA CVA Exploit Frameworks & Attack Vectors 2

Question 1

What is a 'buffer overflow' vulnerability and how is it typically exploited?

Accepted Answer

A programming flaw where more data is written to a fixed-size buffer than it can hold, allowing attackers to overwrite adjacent memory including return addresses

Answer

Buffer overflow vulnerabilities occur when programs fail to validate input size, allowing attackers to overwrite adjacent memory — including function return addresses — to redirect code execution.

Question 2

Which attack technique involves manipulating the return address on the stack to point to attacker-controlled shellcode?

Accepted Answer

Stack-based buffer overflow

Answer

Stack-based buffer overflow overwrites the saved return address on the program's stack, redirecting execution to attacker-supplied shellcode when the function returns.

Question 3

What does 'fuzzing' accomplish in vulnerability research and assessment?

Accepted Answer

Sending large amounts of random, malformed, or unexpected input to applications to discover crashes and potential vulnerabilities

Answer

Fuzzing automatically generates malformed inputs and monitors target applications for crashes, unexpected behavior, or security violations that indicate exploitable vulnerabilities.

Question 4

What is a 'use-after-free' vulnerability?

Accepted Answer

A vulnerability where freed memory is subsequently accessed and potentially controlled by an attacker to achieve code execution

Answer

Use-after-free vulnerabilities occur when a program continues to use a memory pointer after the referenced memory has been freed, allowing attackers to control the freed memory and achieve code execution.

Question 5

During a vulnerability assessment, you encounter a Windows system without the MS17-010 patch. Which well-known exploit targets this vulnerability?

Accepted Answer

EternalBlue

Answer

EternalBlue exploits a critical SMB protocol vulnerability (MS17-010) in Windows, and was famously used by the WannaCry and NotPetya ransomware attacks.

(CVA) Certified Vulnerability Assessor Practice Test

(CVA) Certified Vulnerability Assessor Practice Test

CVA CVA Exploit Frameworks & Attack Vectors 2