300-215 · Question #114
Refer to the exhibit. Which type of code is being used?
The correct answer is D. Python. The function definition uses Python syntax: def function_name(args): It uses the b64encode and decode functions -- typical of Python's base64 module. Data structures such as dictionaries are used with curly braces (e.g., form_data = {entry1: The conditional syntax uses "if…
Question
Refer to the exhibit. Which type of code is being used?
Exhibit
Options
- AShell
- BVBScript
- CBASH
- DPython
How the community answered
(42 responses)- A5% (2)
- B2% (1)
- D93% (39)
Explanation
The function definition uses Python syntax: def function_name(args): It uses the b64encode and decode functions -- typical of Python's base64 module. Data structures such as dictionaries are used with curly braces (e.g., form_data = {entry1: The conditional syntax uses "if r.status_code == 200:" which is Pythonic. The request object "r = post(...)" and use of headers show standard use of the Python requests This type of script is typical in exfiltration scenarios where encoded information is sent via a web form (in this case Google Forms), bypassing detection systems.
Topics
Community Discussion
No community discussion yet for this question.
