nerdexam
EC-Council

312-50V10 · Question #312

A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit?

The correct answer is D. Create a route statement in the meterpreter.. In Metasploit, network pivoting through a compromised host is accomplished by adding a route statement inside an active Meterpreter session.

System Hacking

Question

A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit?

Options

  • AIssue the pivot exploit and set the meterpreter.
  • BReconfigure the network settings in the meterpreter.
  • CSet the payload to propagate through the meterpreter.
  • DCreate a route statement in the meterpreter.

How the community answered

(55 responses)
  • A
    2% (1)
  • B
    13% (7)
  • C
    5% (3)
  • D
    80% (44)

Why each option

In Metasploit, network pivoting through a compromised host is accomplished by adding a route statement inside an active Meterpreter session.

AIssue the pivot exploit and set the meterpreter.

'pivot exploit' is not a valid Metasploit command or workflow; pivoting is a post-exploitation routing technique, not a separate exploit module invocation.

BReconfigure the network settings in the meterpreter.

Reconfiguring network settings within Meterpreter affects the target host's network configuration, not Metasploit's internal routing used for pivoting.

CSet the payload to propagate through the meterpreter.

Setting a payload controls what executes on a target after exploitation; it does not establish routing through a pivot host to reach internal network segments.

DCreate a route statement in the meterpreter.Correct

After obtaining a Meterpreter session on a compromised host, a pentester uses the 'route add' command (e.g., 'route add 192.168.1.0/24 [session_id]') to instruct Metasploit to tunnel subsequent exploit traffic through that session to reach otherwise inaccessible LAN segments. This route statement tells the Metasploit framework to proxy traffic for the specified subnet via the compromised pivot host.

Concept tested: Metasploit pivoting via Meterpreter route statements

Source: https://docs.metasploit.com/docs/using-metasploit/advanced/pivoting-in-metasploit.html

Topics

#Metasploit#pivoting#meterpreter#route statement

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice