eJPT Attacks and Exploits 3

Question 1

Which tool is commonly used to perform a man-in-the-middle attack on a local network by poisoning ARP tables?

Accepted Answer

Arpspoof / ettercap

Answer

Tools like arpspoof (from dsniff) and ettercap are specifically designed to poison ARP caches and perform MITM attacks on LAN segments.

Question 2

What is a cross-site scripting (XSS) attack primarily used to steal?

Accepted Answer

Session cookies

Answer

XSS attacks inject malicious scripts into web pages viewed by other users, most commonly to steal session cookies and hijack authenticated sessions.

Question 3

In the context of eJPT, what does 'pivoting' refer to?

Accepted Answer

Using a compromised host to attack other systems on internal networks

Answer

Pivoting uses a compromised machine as a relay to reach and attack systems on network segments that are not directly accessible to the attacker.

Question 4

Which Nmap script category is most useful for detecting known vulnerabilities on open services?

Accepted Answer

vuln

Answer

The `vuln` NSE script category includes scripts that check for specific known vulnerabilities on detected services.

Question 5

What is the Metasploit command to set up a listener that catches reverse shell connections?

Accepted Answer

use exploit/multi/handler

Answer

`exploit/multi/handler` is the generic Metasploit listener used to catch incoming connections from reverse shell payloads.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test