PenTest+ Attacks & Exploits 5

Question 1

A penetration tester abuses GenericWrite permissions on an Active Directory user account to set a Service Principal Name (SPN) and then request a TGS ticket. What attack is this?

Accepted Answer

Kerberoasting via targeted SPN setting

Answer

Targeted Kerberoasting involves using GenericWrite or similar permissions to set an SPN on a target account, then requesting and cracking the resulting TGS ticket.

Question 2

An attacker sends crafted ICMP packets with a source IP of the victim's address to a large number of hosts that reply to the victim. What DoS technique is this?

Accepted Answer

Smurf attack

Answer

A Smurf attack sends ICMP echo requests with a spoofed source IP to broadcast addresses, causing all hosts to reply to the victim and overwhelming it.

Question 3

A tester uploads a file named 'shell.php%00.jpg' to bypass a file extension whitelist. What technique is being used?

Accepted Answer

Null byte injection

Answer

Null byte injection (%00) terminates string processing in older PHP versions or C-based functions, causing the server to treat the filename as 'shell.php' and ignore '.jpg'.

Question 4

During a cloud pentest on AWS, a tester queries 169.254.169.254 from a compromised EC2 instance. What is the tester attempting to retrieve?

Accepted Answer

IAM instance profile credentials

Answer

The AWS Instance Metadata Service (IMDS) at 169.254.169.254 exposes IAM role credentials attached to the EC2 instance, which can be used for privilege escalation.

Question 5

A tester exploits a web application by injecting template syntax like {{7*7}} into a user-supplied input field and receives '49' in the response. What vulnerability was discovered?

Accepted Answer

Server-Side Template Injection (SSTI)

Answer

Server-Side Template Injection (SSTI) occurs when user input is embedded in a server-side template, allowing code execution within the template engine's context.

(PenTest+) CompTIA PenTest+ Certification Practice Test

(PenTest+) CompTIA PenTest+ Certification Practice Test

PenTest+ Attacks & Exploits 5