312-50V12 · Question #172
A penetration tester is performing an enumeration on a client's network. The tester has acquired permission to perform enumeration activities. They have identified a remote inter-process…
The correct answer is A. Probe the IPC share by attempting to brute force admin credentials. The question describes a penetration tester enumerating a remote IPC share to collect more information. The most appropriate technique for this scenario is attempting to brute force administrative credentials against the identified IPC share.
Question
Options
- AProbe the IPC share by attempting to brute force admin credentials
- BBrute force Active Directory
- CExtract usernames using email IDs
- DConduct a DNS zone transfer
How the community answered
(40 responses)- A73% (29)
- B8% (3)
- C15% (6)
- D5% (2)
Why each option
The question describes a penetration tester enumerating a remote IPC share to collect more information. The most appropriate technique for this scenario is attempting to brute force administrative credentials against the identified IPC share.
The IPC$ share is a hidden administrative share on Windows systems used for inter-process communication and remote administration via SMB. A common enumeration technique involves attempting to gain access by brute-forcing common or weak administrative credentials, which, if successful, allows further information gathering about the system and its resources.
Brute-forcing Active Directory is a broader attack against the domain controller's authentication system and is not specifically targeted at gathering information from an identified remote IPC share.
Extracting usernames using email IDs is a passive reconnaissance technique focused on gathering user account information, not an active method to interact with or enumerate an IPC share.
Conducting a DNS zone transfer is an enumeration technique used to gather network infrastructure details from DNS records, which is unrelated to collecting information from a remote IPC share.
Concept tested: IPC$ share enumeration via credential attacks
Source: https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-smb/9e009477-9942-494b-944d-5872718e476c
Topics
Community Discussion
No community discussion yet for this question.