eJPT Pivoting and Lateral Movement 3

Question 1

Which Meterpreter command is used to perform local port forwarding — for example, forwarding local port 3389 to an internal RDP service at 192.168.1.50:3389?

Accepted Answer

portfwd add -l 3389 -r 192.168.1.50 -p 3389

Answer

The Meterpreter `portfwd add` command creates a local port forward from the attacker's port to an internal host and port through the compromised session.

Question 2

When using SSH remote port forwarding with '-R 8080:localhost:80', which machine listens on port 8080?

Accepted Answer

The remote SSH server

Answer

With SSH -R (remote forwarding), the remote server opens the specified port and forwards incoming connections back to the local machine's specified address and port.

Question 3

A pentester uses Chisel for pivoting. After running 'chisel server -p 8000 --reverse' on the attacker machine, what command is run on the compromised host to create a reverse SOCKS proxy?

Accepted Answer

chisel client attacker_ip:8000 R:socks

Answer

In Chisel's reverse tunnel mode, the client on the compromised host connects back to the server and the R:socks argument creates a reverse SOCKS5 proxy.

Question 4

What is the purpose of the Metasploit post module 'post/multi/manage/autoroute'?

Accepted Answer

Automatically add routes for subnets reachable by a compromised session

Answer

The autoroute post module automatically identifies and adds Metasploit routes for all subnets accessible through a given session.

Question 5

A pentester needs to forward traffic to an internal Windows host's SMB port (445) through a pivot. After configuring the route in Metasploit, which module could they use to perform pass-the-hash against the internal target?

Accepted Answer

exploit/windows/smb/psexec

Answer

The psexec module supports pass-the-hash authentication and can be routed through an existing pivot to attack internal SMB targets.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eJPT Pivoting and Lateral Movement 3