eJPT System Exploitation & Attack Techniques

Question 1

What is the purpose of a buffer overflow attack?

Accepted Answer

To execute arbitrary code in the system's memory.

Answer

A buffer overflow attack occurs when a program attempts to write more data into a fixed-size memory buffer than it can hold. This excess data overflows into adjacent memory locations, potentially overwriting critical data or executable code. Attackers can strategically craft this overflow to inject and execute their own malicious code, gaining control over the affected system.

Question 2

Which tool is commonly used to perform SQL injection attacks?

Accepted Answer

SQLmap.

Answer

SQLmap is a popular open-source penetration testing tool specifically designed to automate the detection and exploitation of SQL injection flaws. It can detect various types of SQL injection vulnerabilities and then take over database servers, access data, and even execute commands on the underlying operating system. While other tools have broader uses, SQLmap is specialized for SQL injection.

Question 3

What is a common method for bypassing web application authentication?

Accepted Answer

Brute force attacks.

Answer

Brute force attacks are a common method for bypassing web application authentication by systematically trying every possible combination of usernames and passwords until the correct one is found. Attackers use automated tools to rapidly submit numerous login attempts. While often slow, it can be effective against weak passwords or systems without proper lockout mechanisms, eventually guessing the correct credentials.

Question 4

What is the purpose of privilege escalation in system exploitation?

Accepted Answer

To gain higher-level permissions on a system.

Answer

Privilege escalation is a post-exploitation technique where an attacker, having already gained initial access to a system, seeks to obtain higher-level access rights than initially granted. This could mean moving from a standard user account to an administrator or root account. Gaining elevated privileges allows the attacker to perform more critical actions, install malware, or access sensitive data.

Question 5

What is a Denial-of-Service (DoS) attack?

Accepted Answer

Sending large volumes of traffic to exhaust system resources.

Answer

A Denial-of-Service (DoS) attack aims to make a machine or network resource unavailable to its intended users. This is typically achieved by overwhelming the target with a flood of traffic or requests, consuming all available resources like bandwidth, CPU, or memory. The goal is to disrupt normal operations and prevent legitimate users from accessing services.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

eJPT System Exploitation & Attack Techniques