QUESTION: 185

A penetration tester is able to use a command injection vulnerability in a web application to get a reverse shell on a system After running a few commands, the tester runs the following:

python -c 'import pty; pty.spawn("/bin/bash")'

Which of the following actions Is the penetration tester performing?

Privilege escalation
Upgrading the shell
Writing a script for persistence
Building a bind shell

Answer(s): B

Reveal Solution Next Question

QUESTION: 186

A penetration tester opened a shell on a laptop at a client's office but is unable to pivot because of restrictive ACLs on the wireless subnet. The tester is also aware that all laptop users have a hard-wired connection available at their desks. Which of the following is the BEST method available to pivot and gain additional access to the network?

Set up a captive portal with embedded malicious code.
Capture handshakes from wireless clients to crack.
Span deauthentication packets to the wireless clients.
Set up another access point and perform an evil twin attack.

Answer(s): D

Reveal Solution Next Question

QUESTION: 187

A tester who is performing a penetration test discovers an older firewall that is known to have serious vulnerabilities to remote attacks but is not part of the original list of IP addresses for the engagement. Which of the following is the BEST option for the tester to take?

Segment the firewall from the cloud.
Scan the firewall for vulnerabilities.
Notify the client about the firewall.
Apply patches to the firewall.

Answer(s): C

Reveal Solution Next Question

QUESTION: 188

A penetration tester is looking for vulnerabilities within a company's web application that are in scope. The penetration tester discovers a login page and enters the following string in a field:

1;SELECT Username, Password FROM Users;

Which of the following injection attacks is the penetration tester using?

Blind SQL
Boolean SQL
Stacked queries
Error-based

Answer(s): C

Reveal Solution Next Question

Free PT0-002 Exam Braindumps (page: 47)

QUESTION: 185

QUESTION: 186

QUESTION: 187

QUESTION: 188