eJPT Exploitation with Metasploit 4

Question 1

Which Metasploit auxiliary module is commonly used to perform a TCP port scan?

Accepted Answer

auxiliary/scanner/portscan/tcp

Answer

auxiliary/scanner/portscan/tcp performs a full TCP connect scan against specified hosts and port ranges.

Question 2

What is a 'staged' payload in Metasploit?

Accepted Answer

A small first-stage stager that downloads the larger payload from the attacker

Answer

Staged payloads use a small stager component to connect back and download the full payload (stage), reducing initial shellcode size.

Question 3

Which msfvenom encoder is commonly used to obfuscate payloads for basic AV evasion?

Accepted Answer

x86/shikata_ga_nai

Answer

x86/shikata_ga_nai is a polymorphic XOR additive feedback encoder widely used to encode Metasploit payloads.

Question 4

What Meterpreter command shows information about the current user on the compromised target?

Accepted Answer

getuid

Answer

'getuid' returns the user account that the Meterpreter session is running as on the target system.

Question 5

In Metasploit, what does RHOSTS refer to when configuring an exploit?

Accepted Answer

The target host(s) to exploit

Answer

RHOSTS specifies the remote (target) host or hosts that the exploit or auxiliary module will run against.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test