nerdexam
CompTIA

PT0-001 · Question #35

A penetration tester wants to launch a graphic console window from a remotely compromised host with IP 10.0.0.20 and display the terminal on the local computer with IP 192.168.1.10. Which of the…

The correct answer is A. From the remote computer, run the following commands. To forward a graphical window from a remote compromised host to a local display, the tester must run two commands on the remote machine to configure and launch the X11 session.

Post-exploitation and lateral movement

Question

A penetration tester wants to launch a graphic console window from a remotely compromised host with IP 10.0.0.20 and display the terminal on the local computer with IP 192.168.1.10. Which of the following would accomplish this task?

Options

  • AFrom the remote computer, run the following commands:
  • BFrom the local computer, run the following command:
  • CFrom the remote computer, run the following command:
  • DFrom the local computer, run the following command:

How the community answered

(46 responses)
  • A
    80% (37)
  • B
    11% (5)
  • C
    2% (1)
  • D
    7% (3)

Why each option

To forward a graphical window from a remote compromised host to a local display, the tester must run two commands on the remote machine to configure and launch the X11 session.

AFrom the remote computer, run the following commands:Correct

X11 requires the remote machine to know where to send graphical output. From the remote host (10.0.0.20), the tester must first set the DISPLAY environment variable pointing to the local X server (e.g., export DISPLAY=192.168.1.10:0.0) and then separately launch a graphical application such as xterm - requiring two commands from the remote machine. This leverages the X Window System's client-server model to render the GUI on the local display.

BFrom the local computer, run the following command:

A single command from the local computer cannot instruct the remote host to redirect its graphical output back - the remote machine must be configured to send its display to the local X server.

CFrom the remote computer, run the following command:

A single command from the remote machine is insufficient because X11 forwarding requires at minimum setting the DISPLAY variable and then separately launching the graphical application as two distinct steps.

DFrom the local computer, run the following command:

A single command from the local computer cannot both reach the remote host and redirect its graphical output; display redirection must be configured from the remote side where the application will run.

Concept tested: X11 display forwarding from compromised remote host

Source: https://www.x.org/wiki/UserDocumentation/GettingStarted/

Topics

#X11 forwarding#SSH tunneling#remote GUI access#lateral movement

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PT0-001 Practice