OSCP Kali Linux 5

Question 1

Which Kali Linux tool can automate the process of finding and exploiting SQL injection vulnerabilities in web applications?

Accepted Answer

sqlmap

Answer

sqlmap automates detection and exploitation of SQL injection flaws, supporting database enumeration, data extraction, and even OS command execution.

Question 2

In Kali Linux, what is the primary use of the 'sslstrip' tool during a man-in-the-middle attack?

Accepted Answer

Downgrades HTTPS connections to HTTP to intercept credentials in cleartext

Answer

sslstrip intercepts HTTP redirects to HTTPS and serves the victim plain HTTP, allowing credentials to be captured in cleartext before forwarding to the real HTTPS server.

Question 3

What Kali Linux command would you use to recursively search all files in /etc for the string 'password'?

Accepted Answer

grep -r 'password' /etc

Answer

grep -r recursively searches file contents for the specified string within the given directory, making it ideal for credential hunting during post-exploitation.

Question 4

In Kali Linux, which tool is used to perform hash identification when you have an unknown hash and need to determine its algorithm?

Accepted Answer

hash-identifier

Answer

hash-identifier analyzes the structure and length of a hash string to identify the most likely hashing algorithm used.

Question 5

What is the purpose of the '/usr/share/wordlists/rockyou.txt' file in Kali Linux?

Accepted Answer

A large password wordlist extracted from a real-world data breach used for dictionary attacks

Answer

rockyou.txt contains approximately 14 million passwords from the 2009 RockYou data breach and is the most commonly used wordlist for password cracking in Kali.

OSCP - Offensive Security Certified Professional Practice Test

OSCP - Offensive Security Certified Professional Practice Test

OSCP Kali Linux 5