OSCP Kali Linux 4 — Questions and Answers
Question 1: Which Kali Linux tool is specifically designed for brute-forcing web application login forms over HTTP?
- hydra with http-post-form module (Correct answer)
- john --wordlist
- medusa -M ssh
- ncrack -p 80
Correct answer: hydra with http-post-form module
Hydra's http-post-form module allows specifying the form URL, parameters, and failure string to brute-force web login forms.
Question 2: What is the Kali Linux command to start the PostgreSQL database service required by Metasploit?
- service postgresql start
- msfdb init
- Both commands are needed — service postgresql start then msfdb init (Correct answer)
- systemctl start metasploit
Correct answer: Both commands are needed — service postgresql start then msfdb init
PostgreSQL must first be started with 'service postgresql start', then 'msfdb init' initializes and connects the Metasploit database.
Question 3: In Kali Linux, which tool converts Windows password hashes from a SAM file dump into a crackable format?
- hashcat --format sam
- samdump2
- pwdump7
- Both samdump2 and pwdump7 extract hashes from SAM files (Correct answer)
Correct answer: Both samdump2 and pwdump7 extract hashes from SAM files
Both samdump2 (used offline with the SYSTEM hive) and pwdump7 (runs on live Windows) can extract NTLM hashes from the SAM database.
Question 4: What Kali Linux tool performs passive OS fingerprinting by analyzing traffic captures without sending any packets?
- nmap -O
- p0f (Correct answer)
- xprobe2
- unicornscan
Correct answer: p0f
p0f (Passive OS Fingerprinting) identifies operating systems by analyzing TCP/IP stack characteristics in captured traffic without generating any probe packets.
Question 5: When using Kali Linux's Burp Suite in intercept mode, what must be configured in the browser to route traffic through Burp?
- The browser's DNS server must point to Burp's IP
- The browser's proxy settings must point to Burp's listener (127.0.0.1:8080 by default) (Correct answer)
- A PAC file must be downloaded from Burp
- The browser extension FoxyProxy is required and cannot be replaced
Correct answer: The browser's proxy settings must point to Burp's listener (127.0.0.1:8080 by default)
Burp Suite acts as an HTTP proxy, so the browser must be configured to send traffic through 127.0.0.1:8080 (Burp's default listener address and port).
Question 6: Which Kali Linux command would enumerate all users on a Linux system that have a valid login shell?
- cat /etc/passwd | grep -v nologin | grep -v false (Correct answer)
- getent passwd --shell
- finger -l
- who -a
Correct answer: cat /etc/passwd | grep -v nologin | grep -v false
Filtering /etc/passwd to exclude 'nologin' and 'false' shells reveals accounts with valid interactive login shells.
Question 7: In Kali Linux, what does the 'crunch' tool generate and how is it used in OSCP scenarios?
- Generates network packet captures for analysis
- Generates custom wordlists based on character sets and length parameters (Correct answer)
- Generates SSL certificates for MITM attacks
- Generates exploit shellcode patterns
Correct answer: Generates custom wordlists based on character sets and length parameters
Crunch creates custom wordlists by specifying minimum/maximum length and character sets, useful for targeted password attacks when password policy is known.
OSCP Kali Linux 4
Which Kali Linux tool is specifically designed for brute-forcing web application login forms over HTTP?