nerdexam
GIAC

GPEN · Question #481

Analyze the screenshot below. What event is depicted?

The correct answer is D. The payload Is designed to create an interactive session.. The screenshot depicts a Metasploit payload that successfully establishes an interactive session such as a Meterpreter or reverse shell session on the target system.

Exploitation & Post-Exploitation Techniques

Question

Analyze the screenshot below. What event is depicted?

Exhibit

GPEN question #481 exhibit

Options

  • AAn exploit that was attempted does not work against the target selected.
  • BA payload was used that is not compatible with the chosen exploit.
  • CThe exploit is designed to work against the local host only.
  • DThe payload Is designed to create an interactive session.

How the community answered

(38 responses)
  • A
    5% (2)
  • B
    3% (1)
  • C
    8% (3)
  • D
    84% (32)

Why each option

The screenshot depicts a Metasploit payload that successfully establishes an interactive session such as a Meterpreter or reverse shell session on the target system.

AAn exploit that was attempted does not work against the target selected.

A failed exploit attempt produces an error or exception message indicating the exploit did not succeed against the target, not confirmation of a session being opened.

BA payload was used that is not compatible with the chosen exploit.

An incompatible payload generates a specific compatibility warning before or during execution, not output consistent with a session being established.

CThe exploit is designed to work against the local host only.

An exploit restricted to localhost would produce an error when a remote target IP is specified, not interactive session output.

DThe payload Is designed to create an interactive session.Correct

Payloads classified as stagers or staged payloads using Meterpreter or shell handlers produce output indicating an interactive session has been opened (e.g., 'Meterpreter session X opened'). This output is distinct from exploit failure messages, compatibility errors, or local-only restriction errors, and confirms the payload's purpose is to provide ongoing interactive access to the compromised target.

Concept tested: Metasploit payload types and interactive session establishment

Source: https://docs.metasploit.com/docs/using-metasploit/basics/how-to-use-a-metasploit-module-appropriately.html

Topics

#Metasploit#payload analysis#interactive session#exploit compatibility

Community Discussion

No community discussion yet for this question.

Full GPEN Practice