nerdexam
EC-Council

312-50V11 · Question #312

A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit?

The correct answer is D. Create a route statement in the meterpreter. In Metasploit, pivoting to a LAN through a compromised host is accomplished by adding a route statement in the Meterpreter session to direct traffic through the compromised machine.

System Hacking

Question

A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit?

Options

  • AIssue the pivot exploit and set the meterpreter.
  • BReconfigure the network settings in the meterpreter.
  • CSet the payload to propagate through the meterpreter.
  • DCreate a route statement in the meterpreter.

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    10% (3)
  • C
    3% (1)
  • D
    83% (24)

Why each option

In Metasploit, pivoting to a LAN through a compromised host is accomplished by adding a route statement in the Meterpreter session to direct traffic through the compromised machine.

AIssue the pivot exploit and set the meterpreter.

There is no 'pivot exploit' command in Metasploit; pivoting is a post-exploitation routing technique, not a standalone exploit module.

BReconfigure the network settings in the meterpreter.

Reconfiguring network settings inside Meterpreter modifies the victim host's network configuration, which does not establish a tunnel for the attacker to route traffic through the compromised host.

CSet the payload to propagate through the meterpreter.

Setting a payload to 'propagate' is not a Metasploit concept for pivoting; propagation relates to worm-like spreading, not controlled LAN traversal via routing.

DCreate a route statement in the meterpreter.Correct

After obtaining a Meterpreter session on a compromised host, the pentester uses the 'route add' command (or 'run post/multi/manage/autoroute') to create a route in Metasploit's routing table. This instructs Metasploit to tunnel subsequent exploit traffic through the Meterpreter session to reach internal LAN subnets that are otherwise unreachable from the attacker's machine.

Concept tested: Metasploit Meterpreter route-based LAN pivoting

Source: https://docs.metasploit.com/docs/using-metasploit/advanced/pivoting-in-metasploit.html

Topics

#Metasploit#pivoting#meterpreter#route statement

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice