QUESTION: 109

A penetration tester downloaded the following Perl script that can be used to identify vulnerabilities in network switches. However, the script is not working properly.

Which of the following changes should the tester apply to make the script work as intended?

Change line 2 to $ip= ג€10.192.168.254ג€;
Remove lines 3, 5, and 6.
Remove line 6.
Move all the lines below line 7 to the top of the script.

Answer(s): B

Reveal Solution Next Question

QUESTION: 110

A penetration tester finds a PHP script used by a web application in an unprotected internal source code repository. After reviewing the code, the tester identifies the following:

Which of the following combinations of tools would the penetration tester use to exploit this script?

Hydra and crunch
Netcat and cURL
Burp Suite and DIRB
Nmap and OWASP ZAP

Answer(s): B

Reveal Solution Next Question

QUESTION: 111

A penetration tester has obtained root access to a Linux-based file server and would like to maintain persistence after reboot. Which of the following techniques would BEST support this objective?

Create a one-shot system service to establish a reverse shell
Obtain /etc/shadow and brute force the root password.
Run the ncג€"e /bin/sh<ג€¦> command
Move laterally to create a user account on LDAP

Answer(s): A

Reveal Solution Next Question

QUESTION: 112

A penetration tester is conducting a penetration test. The tester obtains a root-level shell on a Linux server and discovers the following data in a file named password.txt in the /home/svsacct directory:

U3VQZXIkM2NyZXQhCg==

Which of the following commands should the tester use NEXT to decode the contents of the file?

echo U3VQZXIkM2NyZXQhCg== | base64 ג€"d
tar zxvf password.txt
hydra ג€"lsvsacctג€"p U3VQZXIkM2NyZXQhCg== ssh://192.168.1.0/24
john --wordlist /usr/share/seclists/rockyou.txt password.txt

Answer(s): A

Reveal Solution Next Question

Free PT0-002 Exam Braindumps (page: 28)

QUESTION: 109

QUESTION: 110

QUESTION: 111

QUESTION: 112