Penetration Testing & Network Defense Exploitation                     Peer Instruction Questions for Cybersecurity: Pentesting by William E. Johnson, Allison Luzader, Irfan Ahmed is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.

Upon gaining access to a machine, you find a network interface running on a 192.168.0.0/24 network. How would you map it? Run nmap on your machine with a 192.168.0.0/24 masking based on that address Use Metasploit’s autoroute and run a port scan on 192.168.0.0/24 Use Metasploit’s migration feature to gain direct access to 192.168.0.0/24 Run a broadcast scan on all interfaces Answer: B Category: port scanning

You’ve exploited Notepad (gaining Meterpreter access) and expect that the user may close the application. What should you do to prevent losing your Meterpreter? Background the Meterpreter Re-exploit the machine Migrate to a different process Upload a new Meterpreter payload Replace the Meterpreter with a reverse Meterpreter Answer: C Category: metasploit, meterpreter

Using Metasploit, you’re able to fully access a Windows XP SP2 machine Using Metasploit, you’re able to fully access a Windows XP SP2 machine. What would be the most efficient way to upload and execute a file from your attacking host? Use the windows/upexec/bind_tcp payload to upload and execute the file in Metasploit Use Metasploit to get a Meterpreter, then use the upload and execute commands to upload and execute the file Exploit the machine with MS08-067, get a shell with windows/shell/bind_tcp payload, download the file from your machine, and execute it. Use Netcat to transfer the file and execute it in a Meterpreter session Answer: A Category: metasploit No reason to spend unnecessary time for remote execution using Meterpreter, etc. when you can just use a quick payload The goal here is to leave the smallest footprint possible

You’ve exploited a set of machines, and need to run an identical set of Meterpreter commands on each one. How would you do this? Use Meterpreter’s execute command to execute a Meterpreter script Use Meterpreter’s resource command to execute a local script Use Meterpreter’s resource command to execute a script placed on the remote machines Use Meterpreter’s shell command to run a shell script with Meterpreter commands Answer: B Category: metasploit, meterpreter

You’ve exploited a machine, gained Meterpreter access, and run autoroute to access a new network from that machine. How do you run exploits against machines on the new network without losing your Meterpreter? Run the Meterpreter migrate command to migrate to a new Metasploit session Run the Meterpreter background command to return to the Msfconsole Run the Meterpreter clearenv command to clean Meterpreter’s environment for new exploits Run the Meterpreter resource command to save access to that machine Run the Meterpreter interact command to interact with the new machines Answer: B Category: metasploit, meterpreter