eJPT Exploitation with Metasploit 3

Question 1

Which Meterpreter command uploads a file from the attacker to the compromised target?

Accepted Answer

upload

Answer

The 'upload' command transfers files from the attacker's machine to the target system.

Question 2

What does 'getsystem' attempt to do in a Meterpreter session?

Accepted Answer

Escalate privileges to SYSTEM level

Answer

'getsystem' tries multiple privilege escalation techniques to gain SYSTEM-level access on Windows.

Question 3

Which Meterpreter command captures a screenshot of the target's desktop?

Accepted Answer

screenshot

Answer

The 'screenshot' command in Meterpreter takes a snapshot of the target's current desktop.

Question 4

What is the purpose of 'hashdump' in Meterpreter?

Accepted Answer

Dump password hashes from the SAM database

Answer

'hashdump' extracts NTLM password hashes from the Windows SAM database for offline cracking.

Question 5

In Metasploit, which module type is used after gaining access to perform further actions on the target?

Accepted Answer

post

Answer

Post modules run after a successful exploitation to perform tasks like privilege escalation, persistence, or data gathering.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test