PenTest+ Attacks & Exploits 4

Question 1

A tester discovers a web application that generates PDF files by passing user input to a headless browser. The tester injects an iframe pointing to an internal IP. What vulnerability is this?

Accepted Answer

Server-Side Request Forgery (SSRF)

Answer

SSRF via PDF generation occurs when user-controlled HTML/URLs are processed server-side, allowing attackers to reach internal network resources.

Question 2

An attacker exploits a race condition between a privilege check and file operation in a SUID program. What classic vulnerability type does this represent?

Accepted Answer

Time-of-check to time-of-use (TOCTOU)

Answer

TOCTOU (Time-of-Check to Time-of-Use) exploits the window between a security check and the subsequent use of the checked resource.

Question 3

During a red team engagement, an operator uses Cobalt Strike's sleep command combined with jitter. What is the primary purpose of this technique?

Accepted Answer

Evade network-based anomaly detection

Answer

Sleep with jitter adds randomized delays to beacon check-ins, making traffic patterns irregular and harder to detect via network behavioral analysis.

Question 4

A tester finds a stored XSS vulnerability in an admin panel's user comment field. An attacker submits a payload that creates a new admin account when an admin views the comment. This is an example of:

Accepted Answer

XSS-driven CSRF attack

Answer

Combining stored XSS with CSRF allows the attacker's script to perform authenticated actions on behalf of the admin victim viewing the malicious comment.

Question 5

Which technique allows an attacker to move laterally using a compromised account's NTLM hash without cracking it to plaintext?

Accepted Answer

Pass-the-hash

Answer

Pass-the-hash uses a captured NTLM hash directly for authentication against SMB, WMI, or other NTLM-supporting services without needing the plaintext password.

(PenTest+) CompTIA PenTest+ Certification Practice Test

(PenTest+) CompTIA PenTest+ Certification Practice Test

PenTest+ Attacks & Exploits 4