Q. What is a feature of John the Ripper, a password recovery tool commonly used by pentesters?

View solution

Q. What is the primary purpose of interactive or online testing tools in credential testing?

View solution

Q. Which tool is described as a brute-force dictionary attack tool designed to work against various protocols and services?

View solution

Q. What is CeWL, the Custom Word List Generator, used for?

View solution

Q. What can be included in a custom wordlist for better password cracking chances?

View solution

Q. What is one of the most popular methods of remote access, providing scripting capabilities and encryption?

View solution

Q. In SSH, what command is used for remote port forwarding?

View solution

Q. Which tool is popular as a remote access tool, with a small footprint and easy portability during penetration tests?

View solution

Q. What command is used to set up a reverse shell with Netcat on Linux?

View solution

Q. Which framework makes it easy to set up remote shell access, offering both bind shells and reverse shells?

View solution

Q. What is the key concept in attacking virtual machines and containers, where compromising the underlying system allows control over many virtual machines or containers?

View solution

Q. How do containers differ from virtual machines?

View solution

Q. How can you detect if a Windows system is running in a virtual environment using the wmic command?

View solution

Q. What signs can indicate that a system is virtual when attacking virtual machines?

View solution

Q. In container attacks, what is the term for compromising the underlying system to attack the system containers are running on?

View solution

Q. What command can be used in Linux to determine the virtualization package running, specifically if the system is running system-d?

View solution

Q. Besides the system-detect-virt command, what other command in Linux can provide information about the virtualization package?

View solution

Q. How can you check if a system is being virtualized by examining disk IDs in Linux?

View solution

Q. Why are hypervisors a major target for penetration testers?

View solution

Q. What is a potential method for penetration testers to retain or obtain access by targeting virtual machine repositories?

View solution