Q. What should penetration testers focus on when encountering a biometric system?

View solution

Q. What is a common method for offline password cracking that uses pre-computed tables?

View solution

Q. Which password-cracking utility uses graphics processing units (GPUs) for high-speed cracking?

View solution

Q. What is a feature of John the Ripper, a password recovery tool commonly used by pentesters?

View solution

Q. What is the primary purpose of interactive or online testing tools in credential testing?

View solution

Q. Which tool is described as a brute-force dictionary attack tool designed to work against various protocols and services?

View solution

Q. What is CeWL, the Custom Word List Generator, used for?

View solution

Q. What can be included in a custom wordlist for better password cracking chances?

View solution

Q. What is one of the most popular methods of remote access, providing scripting capabilities and encryption?

View solution

Q. In SSH, what command is used for remote port forwarding?

View solution

Q. Which tool is popular as a remote access tool, with a small footprint and easy portability during penetration tests?

View solution

Q. What command is used to set up a reverse shell with Netcat on Linux?

View solution

Q. Which framework makes it easy to set up remote shell access, offering both bind shells and reverse shells?

View solution

Q. What is the key concept in attacking virtual machines and containers, where compromising the underlying system allows control over many virtual machines or containers?

View solution

Q. How do containers differ from virtual machines?

View solution

Q. How can you detect if a Windows system is running in a virtual environment using the wmic command?

View solution

Q. What signs can indicate that a system is virtual when attacking virtual machines?

View solution

Q. In container attacks, what is the term for compromising the underlying system to attack the system containers are running on?

View solution

Q. What command can be used in Linux to determine the virtualization package running, specifically if the system is running system-d?

View solution

Q. Besides the system-detect-virt command, what other command in Linux can provide information about the virtualization package?

View solution