Q. What type of flaws work on almost all systems, regardless of the operating system or application?

View solution

Q. What is a common focus of exploits that work on multi-platform applications?

View solution

Q. What Sysinternals tools can provide easy-to-review reports for reviewing filesystem permissions in Windows?

View solution

Q. Where does PuTTY store proxy credentials in cleartext on Windows systems?

View solution

Q. What type of tools may store passwords on the local system, making them potential targets for credential retrieval?

View solution

Q. What tool is commonly used for acquiring the local credential store in Windows systems?

View solution

Q. Where is the Linux password file typically found?

View solution

Q. What is the primary requirement for attacking the Linux credential store in most cases?

View solution

Q. Which tool provides features such as dumping cached credentials, dumping LSA secrets, and dumping password hashes in Windows?

View solution

Q. What is a method of acquiring usernames and passwords by replacing remote access tools with Trojaned versions?

View solution

Q. Which package in Kali Linux includes tools for acquiring credentials in Windows?

View solution

Q. What can tools like lsadump, cachedump, and pwdump be used for in Windows?

View solution

Q. How might penetration testers acquire fingerprints for biometric authentication exploitation?

View solution

Q. What should penetration testers focus on when encountering a biometric system?

View solution

Q. What is a common method for offline password cracking that uses pre-computed tables?

View solution

Q. Which password-cracking utility uses graphics processing units (GPUs) for high-speed cracking?

View solution

Q. What is a feature of John the Ripper, a password recovery tool commonly used by pentesters?

View solution

Q. What is the primary purpose of interactive or online testing tools in credential testing?

View solution

Q. Which tool is described as a brute-force dictionary attack tool designed to work against various protocols and services?

View solution

Q. What is CeWL, the Custom Word List Generator, used for?

View solution