eJPT Attacks and Exploits 5

Question 1

What is a 'null session' attack against Windows SMB?

Accepted Answer

An unauthenticated connection to IPC$ share used to enumerate network info

Answer

A null session connects to the IPC$ share without credentials, historically allowing enumeration of users, groups, and shares on older Windows systems.

Question 2

In web application testing, what does CSRF (Cross-Site Request Forgery) force a victim to do?

Accepted Answer

Execute unwanted actions on a site where they are already authenticated

Answer

CSRF tricks authenticated users into unknowingly submitting forged requests to a web application, performing actions like changing passwords or transferring funds.

Question 3

Which Meterpreter command captures screenshots of the victim's desktop?

Accepted Answer

screenshot

Answer

The `screenshot` command in Meterpreter captures the current state of the victim's desktop and saves it locally for the attacker.

Question 4

What is 'pass-the-hash' in Windows environments?

Accepted Answer

Authenticating using the NTLM hash directly without knowing the plaintext password

Answer

Pass-the-hash uses a captured NTLM hash directly for authentication in Windows, bypassing the need to crack it to plaintext first.

Question 5

Which tool is commonly used in eJPT labs to intercept and modify HTTP/HTTPS traffic from a web browser?

Accepted Answer

Burp Suite

Answer

Burp Suite acts as an intercepting proxy between the browser and web server, allowing testers to capture, inspect, and modify HTTP/HTTPS requests and responses.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

eJPT Attacks and Exploits 5