OSCP Network Scanning and Enumeration 3

Question 1

Which Nmap output format is most useful for importing results into other tools during OSCP?

Accepted Answer

-oX (XML)

Answer

The -oX XML output format is the most versatile for importing into tools like Metasploit, OpenVAS, and other security platforms that parse XML.

Question 2

What does the acronym 'OSINT' stand for in the context of OSCP reconnaissance?

Accepted Answer

Open Source Intelligence

Answer

OSINT (Open Source Intelligence) refers to collecting information from publicly available sources like websites, social media, WHOIS records, and DNS data.

Question 3

Which service typically runs on port 3306 and is a common target for enumeration in OSCP labs?

Accepted Answer

MySQL/MariaDB

Answer

Port 3306 is the default port for MySQL and MariaDB database servers, which are frequently found in OSCP lab environments.

Question 4

What Nmap script can identify anonymous FTP login on a target?

Accepted Answer

--script=ftp-anon

Answer

The ftp-anon script checks if an FTP server allows anonymous logins, which can be a significant misconfiguration exposing files without authentication.

Question 5

Which protocol and port combination indicates an LDAP service that might be enumerated for Active Directory information?

Accepted Answer

TCP 389

Answer

LDAP (Lightweight Directory Access Protocol) runs on TCP port 389 and is used by Active Directory for directory queries, making it a valuable enumeration target.

OSCP - Offensive Security Certified Professional Practice Test

OSCP - Offensive Security Certified Professional Practice Test

OSCP Network Scanning and Enumeration 3