312-50V11 · Question #312
A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit?
The correct answer is D. Create a route statement in the meterpreter. In Metasploit, pivoting to a LAN through a compromised host is accomplished by adding a route statement in the Meterpreter session to direct traffic through the compromised machine.
Question
A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit?
Options
- AIssue the pivot exploit and set the meterpreter.
- BReconfigure the network settings in the meterpreter.
- CSet the payload to propagate through the meterpreter.
- DCreate a route statement in the meterpreter.
How the community answered
(29 responses)- A3% (1)
- B10% (3)
- C3% (1)
- D83% (24)
Why each option
In Metasploit, pivoting to a LAN through a compromised host is accomplished by adding a route statement in the Meterpreter session to direct traffic through the compromised machine.
There is no 'pivot exploit' command in Metasploit; pivoting is a post-exploitation routing technique, not a standalone exploit module.
Reconfiguring network settings inside Meterpreter modifies the victim host's network configuration, which does not establish a tunnel for the attacker to route traffic through the compromised host.
Setting a payload to 'propagate' is not a Metasploit concept for pivoting; propagation relates to worm-like spreading, not controlled LAN traversal via routing.
After obtaining a Meterpreter session on a compromised host, the pentester uses the 'route add' command (or 'run post/multi/manage/autoroute') to create a route in Metasploit's routing table. This instructs Metasploit to tunnel subsequent exploit traffic through the Meterpreter session to reach internal LAN subnets that are otherwise unreachable from the attacker's machine.
Concept tested: Metasploit Meterpreter route-based LAN pivoting
Source: https://docs.metasploit.com/docs/using-metasploit/advanced/pivoting-in-metasploit.html
Topics
Community Discussion
No community discussion yet for this question.