PT0-003 · Question #28
A penetration tester enumerates a legacy Windows host on the same subnet. The tester needs to select exploit methods that will have the least impact on the host's operating stability. Which of the…
The correct answer is A. responder -I eth0 john responder_output.txt <rdp to target>. Responder is a tool used for capturing and analyzing NetBIOS, LLMNR, and MDNS queries to perform various man-in-the-middle (MITM) attacks. It can be used to capture hashed credentials, which can then be cracked offline. Using Responder has the least impact on the host's…
Question
A penetration tester enumerates a legacy Windows host on the same subnet. The tester needs to select exploit methods that will have the least impact on the host's operating stability. Which of the following commands should the tester try first?
Options
- Aresponder -I eth0 john responder_output.txt <rdp to target>
- Bhydra -L administrator -P /path/to/pwlist.txt -t 100 rdp://<target_host>
- Cmsf > use <module_name> msf > set <options> msf > set PAYLOAD
- Dpython3 ./buffer_overflow_with_shellcode.py <target> 445
How the community answered
(21 responses)- A81% (17)
- B14% (3)
- C5% (1)
Explanation
Responder is a tool used for capturing and analyzing NetBIOS, LLMNR, and MDNS queries to perform various man-in-the-middle (MITM) attacks. It can be used to capture hashed credentials, which can then be cracked offline. Using Responder has the least impact on the host's operating stability compared to more aggressive methods like buffer overflow attacks or payload injections.
Topics
Community Discussion
No community discussion yet for this question.