nerdexam
GIAC

GSLC · Question #79

Adam works as a Penetration Tester for Umbrella Inc. He is assigned a project of testing the security of the company's network. He is using the Metasploit Framework for developing and executing…

The correct answer is A. shellcode archive C. Opcode Database D. security research. The Metasploit Project includes several sub-projects beyond the core Framework: a shellcode archive, an Opcode Database, and security research components.

Security Operations & Incident Response Leadership

Question

Adam works as a Penetration Tester for Umbrella Inc. He is assigned a project of testing the security of the company's network. He is using the Metasploit Framework for developing and executing exploit code against a remote target machine. The Metasploit Framework is the important sub-project of the Metasploit Project. Which of the following are the other sub-projects under the Metasploit projet? Each correct answer represents a complete solution. Choose all that apply.

Options

  • Ashellcode archive
  • BMetasploit system
  • COpcode Database
  • Dsecurity research

How the community answered

(45 responses)
  • A
    87% (39)
  • B
    13% (6)

Why each option

The Metasploit Project includes several sub-projects beyond the core Framework: a shellcode archive, an Opcode Database, and security research components.

Ashellcode archiveCorrect

The shellcode archive is an official Metasploit sub-project that catalogs shellcode samples used as payloads within exploit modules.

BMetasploit system

'Metasploit system' is not a recognized or official sub-project name under the Metasploit Project; the primary tool is officially called the Metasploit Framework.

COpcode DatabaseCorrect

The Opcode Database is an official sub-project that stores memory addresses of opcodes (such as JMP ESP) across various OS and application versions, enabling reliable return address selection during exploit development.

Dsecurity researchCorrect

Security research is a recognized sub-project component of the Metasploit Project, encompassing vulnerability research that feeds directly into the Framework's exploit modules.

Concept tested: Metasploit Project sub-projects and architecture

Source: https://docs.metasploit.com/

Topics

#Metasploit#exploit framework#penetration testing tools#shellcode

Community Discussion

No community discussion yet for this question.

Full GSLC Practice