312-49 · Question #603
Which part of Metasploit framework helps users to hide the data related to a previously deleted file or currently unused by the allocated file.
The correct answer is D. Slacker. The question asks to identify the Metasploit component used to hide data in slack space or previously deleted file areas.
Question
Which part of Metasploit framework helps users to hide the data related to a previously deleted file or currently unused by the allocated file.
Options
- AWaffen FS
- BRuneFS
- CFragFS
- DSlacker
How the community answered
(20 responses)- A5% (1)
- B10% (2)
- D85% (17)
Why each option
The question asks to identify the Metasploit component used to hide data in slack space or previously deleted file areas.
Waffen FS is not a recognized component of the Metasploit framework for data hiding.
RuneFS is not a recognized component of the Metasploit framework for data hiding.
FragFS is not a recognized component of the Metasploit framework for data hiding.
Slacker is a Metasploit tool specifically designed for data hiding by writing information into the slack space of a file system (the unused portion of a disk cluster allocated to a file) or areas previously occupied by deleted files, making it difficult to detect.
Concept tested: Metasploit (Slacker module)
Topics
Community Discussion
No community discussion yet for this question.