Q. Where is the Linux password file typically found?

View solution

Q. What is the primary requirement for attacking the Linux credential store in most cases?

View solution

Q. Which tool provides features such as dumping cached credentials, dumping LSA secrets, and dumping password hashes in Windows?

View solution

Q. What is a method of acquiring usernames and passwords by replacing remote access tools with Trojaned versions?

View solution

Q. Which package in Kali Linux includes tools for acquiring credentials in Windows?

View solution

Q. What can tools like lsadump, cachedump, and pwdump be used for in Windows?

View solution

Q. How might penetration testers acquire fingerprints for biometric authentication exploitation?

View solution

Q. What should penetration testers focus on when encountering a biometric system?

View solution

Q. What is a common method for offline password cracking that uses pre-computed tables?

View solution

Q. Which password-cracking utility uses graphics processing units (GPUs) for high-speed cracking?

View solution

Q. What is a feature of John the Ripper, a password recovery tool commonly used by pentesters?

View solution

Q. What is the primary purpose of interactive or online testing tools in credential testing?

View solution

Q. Which tool is described as a brute-force dictionary attack tool designed to work against various protocols and services?

View solution

Q. What is CeWL, the Custom Word List Generator, used for?

View solution

Q. What can be included in a custom wordlist for better password cracking chances?

View solution

Q. What is one of the most popular methods of remote access, providing scripting capabilities and encryption?

View solution

Q. In SSH, what command is used for remote port forwarding?

View solution

Q. Which tool is popular as a remote access tool, with a small footprint and easy portability during penetration tests?

View solution

Q. What command is used to set up a reverse shell with Netcat on Linux?

View solution

Q. Which framework makes it easy to set up remote shell access, offering both bind shells and reverse shells?

View solution