An incident handler sees the following lines in the shell history of a user on a machine: mknod test p nc -l -p 11111 0test What did this user implement?

Question

An incident handler sees the following lines in the shell history of a user on a machine: mknod test p nc -l -p 11111 0<test | nc 10.1.1.10 54321 1>test What did this user implement?

Accepted Answer

B. A Netcat backpipe relay, receiving data on port 11111 and sending it to 10.1.1.10 port 54321.

Answer

A. A Netcat listener that executes the contents of the file named test.

Answer

C. A Netcat client that stores its output in a file named test.

Answer

D. A Netcat backdoor with a destination port of 11111 and source port of 54321.

GCIH Question #653: Real Exam Question with Answer & Explanation

Question

Options

Community Discussion