OSCP Kali Linux 5 — Questions and Answers
Question 1: Which Kali Linux tool can automate the process of finding and exploiting SQL injection vulnerabilities in web applications?
- nikto
- sqlmap (Correct answer)
- dirbuster
- wfuzz
Correct answer: sqlmap
sqlmap automates detection and exploitation of SQL injection flaws, supporting database enumeration, data extraction, and even OS command execution.
Question 2: In Kali Linux, what is the primary use of the 'sslstrip' tool during a man-in-the-middle attack?
- Strips SSL certificates from a web server
- Downgrades HTTPS connections to HTTP to intercept credentials in cleartext (Correct answer)
- Removes SSL pinning from Android APKs
- Decrypts SSL traffic using stolen private keys
Correct answer: Downgrades HTTPS connections to HTTP to intercept credentials in cleartext
sslstrip intercepts HTTP redirects to HTTPS and serves the victim plain HTTP, allowing credentials to be captured in cleartext before forwarding to the real HTTPS server.
Question 3: What Kali Linux command would you use to recursively search all files in /etc for the string 'password'?
- find /etc -name 'password'
- grep -r 'password' /etc (Correct answer)
- locate password /etc
- cat /etc/* | grep password
Correct answer: grep -r 'password' /etc
grep -r recursively searches file contents for the specified string within the given directory, making it ideal for credential hunting during post-exploitation.
Question 4: In Kali Linux, which tool is used to perform hash identification when you have an unknown hash and need to determine its algorithm?
- hashcat --identify
- hash-identifier (Correct answer)
- john --identify
- hashtype
Correct answer: hash-identifier
hash-identifier analyzes the structure and length of a hash string to identify the most likely hashing algorithm used.
Question 5: What is the purpose of the '/usr/share/wordlists/rockyou.txt' file in Kali Linux?
- A list of common vulnerability names and CVEs
- A large password wordlist extracted from a real-world data breach used for dictionary attacks (Correct answer)
- A list of common web directories for directory busting
- A list of common usernames for brute-force attacks
Correct answer: A large password wordlist extracted from a real-world data breach used for dictionary attacks
rockyou.txt contains approximately 14 million passwords from the 2009 RockYou data breach and is the most commonly used wordlist for password cracking in Kali.
Question 6: Which Kali Linux feature allows you to run multiple terminal sessions within a single window, useful for monitoring listeners while conducting exploits?
- Kali terminal tabs only
- tmux or screen multiplexers (Correct answer)
- xterm split mode
- The built-in Kali panel manager
Correct answer: tmux or screen multiplexers
tmux and screen are terminal multiplexers that allow splitting a terminal into multiple panes and maintaining persistent sessions, essential for OSCP multi-task work.
Question 7: In Kali Linux, what does running 'chmod 600 id_rsa' before using a private SSH key accomplish?
- Makes the key executable
- Sets the key permissions to owner-read-only, which SSH requires to prevent insecure key usage (Correct answer)
- Encrypts the key file with a passphrase
- Allows any user to read the key
Correct answer: Sets the key permissions to owner-read-only, which SSH requires to prevent insecure key usage
SSH refuses to use private key files with overly permissive permissions; chmod 600 restricts the key to owner-readable only, satisfying SSH's security requirement.
OSCP Kali Linux 5
Which Kali Linux tool can automate the process of finding and exploiting SQL injection vulnerabilities in web applications?