OSCP Kali Linux 4

Question 1

Which Kali Linux tool is specifically designed for brute-forcing web application login forms over HTTP?

Accepted Answer

hydra with http-post-form module

Answer

Hydra's http-post-form module allows specifying the form URL, parameters, and failure string to brute-force web login forms.

Question 2

What is the Kali Linux command to start the PostgreSQL database service required by Metasploit?

Accepted Answer

Both commands are needed — service postgresql start then msfdb init

Answer

PostgreSQL must first be started with 'service postgresql start', then 'msfdb init' initializes and connects the Metasploit database.

Question 3

In Kali Linux, which tool converts Windows password hashes from a SAM file dump into a crackable format?

Accepted Answer

Both samdump2 and pwdump7 extract hashes from SAM files

Answer

Both samdump2 (used offline with the SYSTEM hive) and pwdump7 (runs on live Windows) can extract NTLM hashes from the SAM database.

Question 4

What Kali Linux tool performs passive OS fingerprinting by analyzing traffic captures without sending any packets?

Accepted Answer

p0f

Answer

p0f (Passive OS Fingerprinting) identifies operating systems by analyzing TCP/IP stack characteristics in captured traffic without generating any probe packets.

Question 5

When using Kali Linux's Burp Suite in intercept mode, what must be configured in the browser to route traffic through Burp?

Accepted Answer

The browser's proxy settings must point to Burp's listener (127.0.0.1:8080 by default)

Answer

Burp Suite acts as an HTTP proxy, so the browser must be configured to send traffic through 127.0.0.1:8080 (Burp's default listener address and port).

OSCP - Offensive Security Certified Professional Practice Test

OSCP - Offensive Security Certified Professional Practice Test

OSCP Kali Linux 4