eJPT Post-Exploitation Techniques 3

Question 1

Which Metasploit module type is used for post-exploitation tasks after a session is established?

Accepted Answer

Post

Answer

Post modules in Metasploit are designed to run against existing sessions to gather information, escalate privileges, or maintain persistence.

Question 2

What is credential harvesting in post-exploitation?

Accepted Answer

Collecting usernames, passwords, and hashes from a compromised system

Answer

Credential harvesting involves extracting stored credentials—such as passwords, hashes, and tokens—from memory, files, or the registry of a compromised system.

Question 3

Which Windows registry hive stores user account password hashes locally?

Accepted Answer

HKEY_LOCAL_MACHINE\SAM

Answer

The SAM (Security Account Manager) hive under HKEY_LOCAL_MACHINE stores NTLM hashes for local Windows user accounts.

Question 4

What is lateral movement in the context of post-exploitation?

Accepted Answer

Moving from one compromised system to other systems in the same network

Answer

Lateral movement refers to techniques attackers use to progressively move through a network, compromising additional systems using harvested credentials or exploits.

Question 5

Which Meterpreter command allows you to search for files on the target system?

Accepted Answer

search

Answer

The `search` command in Meterpreter lets you search for files by name or pattern across the target filesystem, useful for finding sensitive data.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

eJPT Post-Exploitation Techniques 3