PenTest+ PenTest+ Post-Exploitation & Pivoting 2

Question 1

What is 'pivoting' in the context of penetration testing?

Accepted Answer

Using a compromised host as a relay to reach other network segments

Answer

Pivoting uses a compromised host as a relay to route traffic through it and reach otherwise inaccessible internal network segments.

Question 2

Which Metasploit post-exploitation module is used to add routes through a Meterpreter session for pivoting?

Accepted Answer

post/multi/manage/autoroute

Answer

The autoroute post module adds network routes through an active Meterpreter session, enabling traffic to be proxied through the compromised host.

Question 3

How is SSH port forwarding used for pivoting during a penetration test?

Accepted Answer

To forward traffic through an SSH connection and reach internal hosts not directly accessible

Answer

SSH local (-L) and remote (-R) port forwarding tunnels traffic through an SSH connection, allowing access to internal services behind firewalls.

Question 4

Which Metasploit auxiliary module creates a SOCKS proxy through an active Meterpreter session?

Accepted Answer

auxiliary/server/socks_proxy

Answer

The socks_proxy auxiliary module creates a local SOCKS listener that routes all traffic through the Meterpreter session for seamless pivoting.

Question 5

What is 'double pivoting' in penetration testing?

Accepted Answer

Chaining two compromised hosts to reach a third, deeper network segment

Answer

Double pivoting chains two compromised hosts sequentially, routing traffic through the first pivot to reach the second, which then provides access to an even deeper network.

(PenTest+) CompTIA PenTest+ Certification Practice Test

(PenTest+) CompTIA PenTest+ Certification Practice Test

PenTest+ PenTest+ Post-Exploitation & Pivoting 2