eJPT Attacks and Exploits 4

Question 1

Which protocol is most commonly exploited by the EternalBlue vulnerability (MS17-010)?

Accepted Answer

SMB

Answer

EternalBlue exploits a buffer overflow vulnerability in Microsoft's SMBv1 protocol, enabling unauthenticated remote code execution.

Question 2

What is the purpose of the `john` tool in a penetration test?

Accepted Answer

Password hash cracking

Answer

John the Ripper is a password cracking tool that uses dictionary, brute-force, and rule-based attacks against hashed passwords.

Question 3

In a dictionary attack against a login form, what is the attacker using as input?

Accepted Answer

A precompiled list of common passwords/words

Answer

A dictionary attack uses a wordlist of likely passwords (common words, phrases, known breached passwords) rather than pure random guessing.

Question 4

Which Metasploit payload format is completely self-contained with no external stager needed?

Accepted Answer

Stageless payload (windows/meterpreter_reverse_tcp)

Answer

Stageless payloads (with underscore before the payload name) include the full Meterpreter embedded in the shellcode without needing a separate stager.

Question 5

What is 'fuzzing' in the context of vulnerability research?

Accepted Answer

Sending large volumes of random/malformed data to discover crashes

Answer

Fuzzing sends unexpected, malformed, or random input to an application to trigger crashes, memory corruption, or other vulnerabilities.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

eJPT Attacks and Exploits 4