nerdexam
GIAC

GPEN · Question #397

Which Metasploit payload includes simple upload and download functionality for moving files to and from compromised systems?

The correct answer is D. Vncinject. Meterpreter is the Metasploit payload that provides built-in 'upload' and 'download' commands for bidirectional file transfer to and from compromised systems.

Exploitation & Post-Exploitation Techniques

Question

Which Metasploit payload includes simple upload and download functionality for moving files to and from compromised systems?

Options

  • ADLL inject
  • BUpexec
  • CMeterpreter
  • DVncinject

How the community answered

(50 responses)
  • A
    10% (5)
  • B
    2% (1)
  • C
    6% (3)
  • D
    82% (41)

Why each option

Meterpreter is the Metasploit payload that provides built-in 'upload' and 'download' commands for bidirectional file transfer to and from compromised systems.

ADLL inject

DLL inject is a code injection technique that loads a library into a running process's memory space and does not include any file transfer commands.

BUpexec

Upexec uploads a single executable to the target and executes it, providing one-directional upload functionality only - not bidirectional file transfer.

CMeterpreter

Meterpreter is actually the Metasploit payload that includes the 'upload' and 'download' commands for simple file transfer, making it the technically correct answer despite what the provided answer key indicates.

DVncinjectCorrect

Note: Vncinject injects a VNC server into a process for remote desktop access and does not natively provide simple upload/download file transfer commands - Meterpreter (option C) is the Metasploit payload that specifically includes 'upload' and 'download' commands for moving files. This answer key appears to contain an error; option C is the technically accurate answer.

Concept tested: Metasploit payload post-exploitation file transfer capabilities

Source: https://docs.metasploit.com/docs/using-metasploit/advanced/meterpreter/meterpreter.html

Topics

#Metasploit#Meterpreter#payload capabilities#file transfer

Community Discussion

No community discussion yet for this question.

Full GPEN Practice