GPEN · Question #418
Analyze the screenshot below. What type of vulnerability is being attacked?
The correct answer is B. Internet Explorer. This question identifies a browser-based vulnerability attack targeting Internet Explorer, which has a long history of client-side exploits leveraged by attackers.
Question
Analyze the screenshot below. What type of vulnerability is being attacked?
Exhibit
Options
- AWindows Server service
- BInternet Explorer
- CWindows Powershell
- DLocal Security Authority
How the community answered
(50 responses)- A4% (2)
- B72% (36)
- C8% (4)
- D16% (8)
Why each option
This question identifies a browser-based vulnerability attack targeting Internet Explorer, which has a long history of client-side exploits leveraged by attackers.
Windows Server service vulnerabilities involve network-level attacks targeting services like SMB or RPC, not client-side browser exploitation.
Internet Explorer has been the target of numerous client-side vulnerabilities exploitable through malicious web pages, drive-by downloads, and crafted HTML content. Its rendering engine, ActiveX subsystem, and scripting engine have all been weaponized in exploit frameworks like Metasploit. A screenshot of such an attack would typically show a browser-based payload delivery targeting an IE-specific CVE.
PowerShell is typically abused post-exploitation for lateral movement and persistence, not as an initial client-side attack vector.
The Local Security Authority is targeted during credential harvesting after initial access is gained, not during a browser-based initial exploitation stage.
Concept tested: Client-side browser vulnerability exploitation via IE
Source: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-051
Topics
Community Discussion
No community discussion yet for this question.
