312-50V9 · Question #85
A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit?
The correct answer is D. Create a route statement in the meterpreter. In Metasploit, network pivoting through a compromised host is accomplished by adding a route in the meterpreter session to direct traffic through that host into the internal LAN.
Question
A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit?
Options
- AIssue the pivot exploit and set the meterpreter.
- BReconfigure the network settings in the meterpreter.
- CSet the payload to propagate through the meterpreter.
- DCreate a route statement in the meterpreter.
How the community answered
(31 responses)- A3% (1)
- B3% (1)
- C10% (3)
- D84% (26)
Why each option
In Metasploit, network pivoting through a compromised host is accomplished by adding a route in the meterpreter session to direct traffic through that host into the internal LAN.
'Pivot exploit' is not a valid Metasploit command or module - pivoting is a routing configuration step, not a standalone exploit.
Reconfiguring network settings inside the meterpreter session changes the victim host's network config, which is not the mechanism Metasploit uses to route attacker traffic through the pivot.
Setting a payload to 'propagate through meterpreter' describes a conceptual misunderstanding - propagation and pivoting are distinct techniques and there is no such payload configuration for pivoting.
After gaining a meterpreter session on the FTP server, the pentester uses the 'route add' command (via 'run post/multi/manage/autoroute' or the msf console 'route' command) to instruct Metasploit to tunnel subsequent exploit traffic through the compromised host. This allows attacks against internal LAN targets that are not directly reachable from the attacker's machine.
Concept tested: Metasploit meterpreter route-based network pivoting
Source: https://docs.metasploit.com/docs/using-metasploit/advanced/pivoting-in-metasploit.html
Topics
Community Discussion
No community discussion yet for this question.