nerdexam
CompTIA

PT0-001 · Question #85

A penetration tester successfully exploits a DM2 server that appears to be listening on an outbound port The penetration tester wishes to forward that traffic back to a device. Which of the…

The correct answer is C. Wiresrtark D. SSH. In this scenario, the best options are SSH and Wireshark. Secure Shell (SSH) provides secure encrypted connections between systems. SSH provides remote shell access via an encrypted connection. SSH is used for secure command-line access to systems, typically via TCP port 22…

Post-exploitation and lateral movement

Question

A penetration tester successfully exploits a DM2 server that appears to be listening on an outbound port The penetration tester wishes to forward that traffic back to a device. Which of the following are the BEST tools to use few this purpose? (Select TWO)

Options

  • ATcpdump
  • BNmap
  • CWiresrtark
  • DSSH
  • ENetcat
  • FCain and Abel

How the community answered

(17 responses)
  • A
    18% (3)
  • B
    6% (1)
  • C
    71% (12)
  • E
    6% (1)

Explanation

In this scenario, the best options are SSH and Wireshark. Secure Shell (SSH) provides secure encrypted connections between systems. SSH provides remote shell access via an encrypted connection. SSH is used for secure command-line access to systems, typically via TCP port 22, and is found on devices and systems of all types. Because SSH is so common, testing systems that provide an SSH service is a very attractive option for a penetration tester. Wireshark is a protocol analyzer that allows penetration testers to eavesdrop on and dissect network traffic. Wireshark also allows for capturing network traffic from wireless networks.

Topics

#SSH tunneling#port forwarding#traffic pivoting#DMZ exploitation

Community Discussion

No community discussion yet for this question.

Full PT0-001 Practice