Q. What role does SharpHound play in conjunction with BloodHound?

View solution

Q. Why might a penetration tester use BloodHound before using tools like PowerSploit or Empire?

View solution

Q. What is PsExec, and how is it commonly used in penetration testing?

View solution

Q. How can a penetration tester enable remote PowerShell command execution on Windows systems?

View solution

Q. What setting must be configured if remote systems are not part of the same domain in order to enable PowerShell remoting?

View solution

Q. What does WMI stand for, and what capabilities does it offer for penetration testers?

View solution

Q. What is the purpose of fileless malware in penetration testing?

View solution

Q. What is the concept of "living off the land" in penetration testing?

View solution

Q. How can a scheduled task be created to run the calculator application once a day at 8:00 a.m. on a Windows system using the command line?

View solution

Q. How does cron work on Linux or Unix systems for scheduling tasks?

View solution

Q. What is the purpose of using a "call home" script in scheduled tasks?

View solution

Q. What is the primary function of Responder in the context of SMB services?

View solution

Q. What protocol is used by SMB for file-sharing, authentication, authorization, and print services?

View solution

Q. What is the primary purpose of SecureAuth’s Impacket toolset?

View solution

Q. Which Impacket tool replicates the functionality of PsExec in Python?

View solution

Q. What is the objective of pass-the-hash attacks in penetration testing?

View solution

Q. How can mitm6 be used in a DNS attack?

View solution

Q. What does LSASS.exe stand for in the context of pass-the-hash attacks?

View solution

Q. Which port is commonly associated with Windows Remote Desktop Protocol (RDP)?

View solution

Q. In the context of Apple's Remote Desktop (ARD), how do penetration testers often use ARD?

View solution