nerdexam
CompTIA

PT0-002 · Question #609

A penetration tester uses Metasploit Framework and obtains a reverse shell session: Which of the following commands should the penetration tester run at Metasploit to promote this shell to a…

The correct answer is C. session -u l. To promote a basic reverse shell session to a more powerful Meterpreter session in Metasploit, the 'sessions -u' command is used.

Post-exploitation and lateral movement

Question

A penetration tester uses Metasploit Framework and obtains a reverse shell session:

Which of the following commands should the penetration tester run at Metasploit to promote this shell to a Meterpreter session?

Options

  • Asession -t l
  • Bsession -i l
  • Csession -u l
  • Dsession -k l

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    89% (32)
  • D
    3% (1)

Why each option

To promote a basic reverse shell session to a more powerful Meterpreter session in Metasploit, the 'sessions -u' command is used.

Asession -t l

The `-t` flag is not used for upgrading sessions in Metasploit; it is typically associated with listing or filtering session types.

Bsession -i l

The `-i` flag is used to interact with an existing session, not to upgrade it to a different type of session.

Csession -u lCorrect

In Metasploit Framework, the `sessions -u <session_id>` command is the correct way to upgrade a standard command shell (like a reverse shell) to a Meterpreter session, which offers more advanced post-exploitation capabilities.

Dsession -k l

The `-k` flag is used to kill or terminate an existing session, which is the opposite action of promoting it.

Concept tested: Metasploit session management (upgrading to Meterpreter)

Source: https://docs.metasploit.com/docs/using-metasploit/basic-msf-usage/handling-sessions.html

Topics

#Metasploit#Meterpreter#Shell upgrade#Post-exploitation

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice