You have successfully run a buffer overflow attack against a default IIS installation running on a Windows 2000 Server. The server allows you to spawn a shell. In order to perform the actions you intend to do, you need elevated permission. You need to know what your current privileges are within the shell. Which of the following options would be your current privileges?
Answer(s): C
If you manage to get the system to start a shell for you, that shell will be running as LOCAL_SYSTEM.
You wish to determine the operating system and type of web server being used. At the same time you wish to arouse no suspicion within the target organization.While some of the methods listed below work, which holds the least risk of detection?
Answer(s): D
Netcraft is providing research data and analysis on many aspects of the Internet.Netcraft has explored the Internet since 1995 and is a respected authority on the market share of web servers, operating systems, hosting providers, ISPs, encrypted transactions, electronic commerce, scripting languages and content technologies on the internet.
Bart is looking for a Windows NT/2000/XP command-line tool that can be used to assign, display, or modify ACL’s (access control lists) to files or folders and also one that can be used within batch files.Which of the following tools can be used for that purpose? (Choose the best answer)
Answer(s): B
Cacls.exe is a Windows NT/2000/XP command-line tool you can use to assign, display, or modify ACLs (access control lists) to files or folders. Cacls is an interactive tool, and since it's a command-line utility, you can also use it in batch files.
Which of the following buffer overflow exploits are related to Microsoft IIS web server? (Choose three)
Answer(s): A,B,C
Both the buffer overflow in the Internet Printing Protocol and the ISAPI extension buffer overflow is explained in Microsoft Security Bulletin MS01-023. The Code Red worm was a computer worm released on the Internet on July 13, 2001. It attacked computers running Microsoft's IIS web server.
On a default installation of Microsoft IIS web server, under which privilege does the web server software execute?
If not changed during the installation, IIS will execute as Local System with way to high privileges.
Post your Comments and Discuss EC-Council 312-50 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 312-50 content, but please register or login to continue.