eJPT System Exploitation & Attack Techniques 2

Question 1

Which Metasploit command upgrades a standard shell session to a Meterpreter session?

Accepted Answer

sessions -u <id>

Answer

The `sessions -u <id>` command in Metasploit automatically upgrades a command shell to a Meterpreter session.

Question 2

When exploiting a buffer overflow, what is the purpose of a NOP sled?

Accepted Answer

To provide a landing zone so execution slides into the shellcode

Answer

A NOP sled is a sequence of NOP instructions that allows imprecise jumps to still reach and execute the shellcode.

Question 3

Which tool is used within Metasploit to generate custom shellcode payloads?

Accepted Answer

msfvenom

Answer

msfvenom combines payload generation and encoding, replacing the older msfpayload and msfencode tools.

Question 4

In a pass-the-hash attack, what credential material is used to authenticate without knowing the plaintext password?

Accepted Answer

NTLM hash

Answer

Pass-the-hash exploits Windows NTLM authentication by using the captured NTLM hash directly, bypassing the need for the plaintext password.

Question 5

What does the Metasploit `getsystem` command attempt to do?

Accepted Answer

Escalate privileges to SYSTEM level

Answer

The `getsystem` command in Meterpreter attempts multiple privilege escalation techniques to obtain SYSTEM-level access.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test