eJPT Attacks and Exploits 2

Question 1

Which Metasploit command is used to search for a specific exploit module by name?

Accepted Answer

search <keyword>

Answer

The `search` command in msfconsole allows you to search for modules by keyword, name, CVE, or platform.

Question 2

What type of payload establishes a connection FROM the target machine TO the attacker?

Accepted Answer

Reverse shell

Answer

A reverse shell has the victim connect back to the attacker's machine, which helps bypass firewalls that block inbound connections.

Question 3

In an ARP poisoning attack, what does the attacker send to redirect traffic through their machine?

Accepted Answer

Gratuitous ARP replies with the attacker's MAC

Answer

The attacker sends gratuitous ARP replies associating the gateway IP with their own MAC address, causing victims to send traffic through the attacker.

Question 4

Which SQL injection technique retrieves data by causing the database to generate time delays?

Accepted Answer

Time-based blind injection

Answer

Time-based blind SQL injection uses functions like SLEEP() or WAITFOR DELAY to infer data based on how long the response takes.

Question 5

What is the primary purpose of a staged Metasploit payload (e.g., windows/meterpreter/reverse_tcp)?

Accepted Answer

To send a small stager first that downloads the full payload

Answer

Staged payloads send a tiny initial stager that connects back to Metasploit and downloads the full Meterpreter payload, keeping the initial shellcode small.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

eJPT Attacks and Exploits 2