A penetration tester wrote the following script on a compromised system: Which of the following would explain using this script instead of another tool?

The correct answer is C. The Bash script will provide more thorough output. A custom Bash script written specifically for the engagement can be tailored to collect exactly the data the tester needs and format the output to be more detailed and comprehensive than the fixed-format output of generic tools. Off-the-shelf tools produce standardized reports…

Post-exploitation and lateral movement

Question

A penetration tester wrote the following script on a compromised system:

Which of the following would explain using this script instead of another tool?

Exhibit

Options

AThe typical tools could not be used against Windows systems.
BThe configuration required the penetration tester to not utilize additional files.
CThe Bash script will provide more thorough output.
DThe penetration tester wanted to persist this script to run on reboot.

How the community answered

(25 responses)

A
4% (1)
C
88% (22)
D
8% (2)

Explanation

A custom Bash script written specifically for the engagement can be tailored to collect exactly the data the tester needs and format the output to be more detailed and comprehensive than the fixed-format output of generic tools. Off-the-shelf tools produce standardized reports that may omit context-specific details, while a hand-crafted script can combine multiple enumeration steps and present results in a unified, thorough manner. Option A is incorrect because standard tools generally do work against Windows. Option B is contradictory since writing a script to disk also creates a file. Option D (persistence on reboot) would require placing the script in a startup location, which is unrelated to the choice of scripting over external tools.

Topics

#Custom Scripting#Post-exploitation#Information Gathering#Tool Selection

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice