eJPT Exploitation with Metasploit 3 — Questions and Answers
Question 1: Which Meterpreter command uploads a file from the attacker to the compromised target?
- download
- upload (Correct answer)
- put
- send
Correct answer: upload
The 'upload' command transfers files from the attacker's machine to the target system.
Question 2: What does 'getsystem' attempt to do in a Meterpreter session?
- Retrieve system information
- Escalate privileges to SYSTEM level (Correct answer)
- List running system processes
- Dump the system registry
Correct answer: Escalate privileges to SYSTEM level
'getsystem' tries multiple privilege escalation techniques to gain SYSTEM-level access on Windows.
Question 3: Which Meterpreter command captures a screenshot of the target's desktop?
- screengrab
- screenshot (Correct answer)
- capture
- snap
Correct answer: screenshot
The 'screenshot' command in Meterpreter takes a snapshot of the target's current desktop.
Question 4: What is the purpose of 'hashdump' in Meterpreter?
- Hash a file for integrity checking
- Dump password hashes from the SAM database (Correct answer)
- Create a hash of the current session
- Delete cached credentials
Correct answer: Dump password hashes from the SAM database
'hashdump' extracts NTLM password hashes from the Windows SAM database for offline cracking.
Question 5: In Metasploit, which module type is used after gaining access to perform further actions on the target?
- exploit
- auxiliary
- post (Correct answer)
- encoder
Correct answer: post
Post modules run after a successful exploitation to perform tasks like privilege escalation, persistence, or data gathering.
Question 6: What does the 'background' command do in an active Meterpreter session?
- Runs a background process on the target
- Sends the session to the background while keeping it alive (Correct answer)
- Terminates the session cleanly
- Hides the session from detection
Correct answer: Sends the session to the background while keeping it alive
'background' returns to the msfconsole prompt while keeping the Meterpreter session open and accessible.
Question 7: Which command in msfconsole sets a global option that applies to all subsequently loaded modules?
- set
- setg (Correct answer)
- global
- apply
Correct answer: setg
'setg' (set global) persists an option like LHOST or LPORT across all modules without needing to re-enter it.
eJPT Exploitation with Metasploit 3
Which Meterpreter command uploads a file from the attacker to the compromised target?