eJPT System Exploitation & Attack Techniques 4

Question 1

What is the primary risk of running exploits against production systems during a penetration test?

Accepted Answer

It can cause system crashes or data corruption

Answer

Exploits, especially those targeting memory corruption vulnerabilities, can crash services or corrupt data, causing unintended denial of service on production systems.

Question 2

Which type of shell binding method has the target machine connect outward to the attacker (useful for bypassing inbound firewall rules)?

Accepted Answer

Reverse shell

Answer

A reverse shell has the victim initiate an outbound connection to the attacker's listener, bypassing inbound firewall rules that block incoming connections.

Question 3

What does the Metasploit option `PAYLOAD` set?

Accepted Answer

The code to execute on the target after successful exploitation

Answer

The PAYLOAD option specifies what code will be executed on the target system after the exploit successfully gains code execution.

Question 4

In the context of eJPT, which command-line tool is commonly used for transferring files to/from a Windows target when a Meterpreter session is unavailable?

Accepted Answer

certutil

Answer

Certutil.exe is a native Windows tool often abused to download files from the internet, making it useful for file transfer when no other agent is present.

Question 5

What is 'living off the land' in the context of post-exploitation?

Accepted Answer

Using built-in OS tools and features to avoid dropping new malware

Answer

Living off the land means using legitimate, pre-installed OS utilities (like PowerShell, certutil, wmic) for malicious purposes to blend in and avoid detection.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

eJPT System Exploitation & Attack Techniques 4