The following file was obtained during reconnaissance: Which of the following is most likely to be successful if a penetration tester achieves non- privileged user access?

The correct answer is A. Exposure of other users' sensitive data. The adduser.conf file shown configures user creation behavior. Notably, DIR_MODE=0777 sets newly created home directories to world-readable and writable, allowing any local user to read, write, or execute files in another user’s home directory. This misconfiguration creates a sev

Submitted by emma.c· Mar 6, 2026Post-exploitation and Lateral Movement

Question

The following file was obtained during reconnaissance:

Which of the following is most likely to be successful if a penetration tester achieves non- privileged user access?

Exhibit

Options

AExposure of other users' sensitive data
BUnauthorized access to execute binaries via sudo
CHijacking the default user login shells
DCorrupting the skeleton configuration file

How the community answered

(54 responses)

A
70% (38)
B
9% (5)
C
17% (9)
D
4% (2)

Explanation

The adduser.conf file shown configures user creation behavior. Notably, DIR_MODE=0777 sets newly created home directories to world-readable and writable, allowing any local user to read, write, or execute files in another user’s home directory. This misconfiguration creates a severe security risk, making exposure of other users' sensitive data the most likely successful outcome for a non-privileged user.

Topics

#information disclosure#Linux enumeration#sensitive data

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice