A penetration tester wants to identify CVEs that can be leveraged to gain execution on a Linux server that has an SSHD running. Which of the following would BEST support this task?

The correct answer is A. Run nmap with the -O, -p22, and -sC options set against the target. It has the ssh port (22) and at the same time, it runs the default scripts (-sC) to check for vulnerabilities.

Information Gathering and Vulnerability Scanning

Question

Options

ARun nmap with the -O, -p22, and -sC options set against the target
BRun nmap with the -sV and -p22 options set against the target
CRun nmap with the --script vulners option set against the target
DRun nmap with the -sA option set against the target

How the community answered

(38 responses)

A
79% (30)
B
5% (2)
C
13% (5)
D
3% (1)

Explanation

It has the ssh port (22) and at the same time, it runs the default scripts (-sC) to check for vulnerabilities.

Topics

#Nmap#Vulnerability Scanning#CVE Discovery#Service Enumeration

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice