Q. What information does the Windows Security Accounts Manager (SAM) database contain?

View solution

Q. How can password hashes be dumped from the SAM database on Windows systems?

View solution

Q. What is a common requirement for executing processes like dumping the SAM database?

View solution

Q. What module in Metasploit lists missing patches on Windows systems?

View solution

Q. When are Windows kernel exploits most useful for penetration testers?

View solution

Q. What type of flaws work on almost all systems, regardless of the operating system or application?

View solution

Q. What is a common focus of exploits that work on multi-platform applications?

View solution

Q. What Sysinternals tools can provide easy-to-review reports for reviewing filesystem permissions in Windows?

View solution

Q. Where does PuTTY store proxy credentials in cleartext on Windows systems?

View solution

Q. What type of tools may store passwords on the local system, making them potential targets for credential retrieval?

View solution

Q. What tool is commonly used for acquiring the local credential store in Windows systems?

View solution

Q. Where is the Linux password file typically found?

View solution

Q. What is the primary requirement for attacking the Linux credential store in most cases?

View solution

Q. Which tool provides features such as dumping cached credentials, dumping LSA secrets, and dumping password hashes in Windows?

View solution

Q. What is a method of acquiring usernames and passwords by replacing remote access tools with Trojaned versions?

View solution

Q. Which package in Kali Linux includes tools for acquiring credentials in Windows?

View solution

Q. What can tools like lsadump, cachedump, and pwdump be used for in Windows?

View solution

Q. How might penetration testers acquire fingerprints for biometric authentication exploitation?

View solution

Q. What should penetration testers focus on when encountering a biometric system?

View solution

Q. What is a common method for offline password cracking that uses pre-computed tables?

View solution