eJPT Pivoting and Lateral Movement 5

Question 1

A pentester has a shell on a Windows pivot host and wants to enumerate all network interfaces to identify additional subnets. Which command shows this information?

Accepted Answer

ipconfig /all

Answer

ipconfig /all displays all network adapter configurations including IP addresses, subnets, and gateways, revealing additional network segments.

Question 2

In a pivoting scenario, a pentester has routed through a compromised host to reach 172.16.0.0/24. Running nmap via proxychains returns only TCP results and misses ICMP-based host discovery. Why?

Accepted Answer

SOCKS proxies only support TCP, not ICMP

Answer

SOCKS proxies are TCP-only protocols and cannot tunnel ICMP packets, so nmap host discovery using ping (-PE) will not work through proxychains.

Question 3

After pivoting into a network via Metasploit routes, which nmap flag should be used to disable ICMP ping discovery so host scanning works through the SOCKS proxy?

Accepted Answer

-Pn

Answer

The -Pn flag tells nmap to skip host discovery (no ping) and treat all hosts as up, which is necessary when scanning through a SOCKS proxy that can't forward ICMP.

Question 4

A pentester uses SSH local port forwarding: 'ssh -L 8080:192.168.1.10:80 user@pivot'. After this, how does the pentester access the internal web service at 192.168.1.10?

Accepted Answer

Browse to http://127.0.0.1:8080 on the attacker machine

Answer

Local port forwarding binds the specified port on the local (attacker) machine, so connections to 127.0.0.1:8080 are forwarded through the SSH tunnel to the target.

Question 5

Which Windows command can a pentester run on a pivot host to discover other machines with open SMB shares in the local subnet (Windows built-in)?

Accepted Answer

net view

Answer

The `net view` command enumerates computers and shared resources visible on the Windows network, helping identify lateral movement targets.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eJPT Pivoting and Lateral Movement 5