312-50V10 · Question #312
A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit?
The correct answer is D. Create a route statement in the meterpreter.. In Metasploit, network pivoting through a compromised host is accomplished by adding a route statement inside an active Meterpreter session.
Question
A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit?
Options
- AIssue the pivot exploit and set the meterpreter.
- BReconfigure the network settings in the meterpreter.
- CSet the payload to propagate through the meterpreter.
- DCreate a route statement in the meterpreter.
How the community answered
(55 responses)- A2% (1)
- B13% (7)
- C5% (3)
- D80% (44)
Why each option
In Metasploit, network pivoting through a compromised host is accomplished by adding a route statement inside an active Meterpreter session.
'pivot exploit' is not a valid Metasploit command or workflow; pivoting is a post-exploitation routing technique, not a separate exploit module invocation.
Reconfiguring network settings within Meterpreter affects the target host's network configuration, not Metasploit's internal routing used for pivoting.
Setting a payload controls what executes on a target after exploitation; it does not establish routing through a pivot host to reach internal network segments.
After obtaining a Meterpreter session on a compromised host, a pentester uses the 'route add' command (e.g., 'route add 192.168.1.0/24 [session_id]') to instruct Metasploit to tunnel subsequent exploit traffic through that session to reach otherwise inaccessible LAN segments. This route statement tells the Metasploit framework to proxy traffic for the specified subnet via the compromised pivot host.
Concept tested: Metasploit pivoting via Meterpreter route statements
Source: https://docs.metasploit.com/docs/using-metasploit/advanced/pivoting-in-metasploit.html
Topics
Community Discussion
No community discussion yet for this question.