33. Pentesting Quiz

What is the primary goal of the Security Fundamentals Academy?

• To provide hands-on skills for solving real-world problems

• To offer free security tools

• To teach advanced hacking techniques

• To get students Security Plus certified

What is pentesting?

• A process to test the security of computer systems by simulating attacks

• A way to monitor network traffic

• A technique to test the strength of passwords

• A method to secure physical locks

What does the file inclusion vulnerability allow an attacker to do?

• Delete files from the server

• Inject malicious code into the server

• Access restricted files and directories on the server

• Upload files to the server

What is the purpose of the 'page=' parameter in the file inclusion vulnerability demonstration?

• To specify the file to be included

• To upload a new file

• To delete a file

• To change the file permissions

What command is used to list the current files and folders in a directory?

• mkdir

• cd

• ls -la

• pwd

What does the 'whoami' command do?

• Deletes a user

• Changes the current user

• Displays the current user's username

• Lists all users on the system

What is the significance of the 'www-data' user in the context of the command injection vulnerability?

• It is the user running the web server

• It is a guest user

• It is the root user

• It is a system administrator

What is the primary risk of a file upload vulnerability?

• Allowing unauthorized file downloads

• Enabling attackers to upload and execute malicious scripts

• Deleting important files

• Changing file permissions

What is the purpose of the 'special.php' script created in the demonstration?

• To delete files from the server

• To change file permissions

• To execute system commands from the web interface

• To list all files on the server

What tool is used to create a reverse shell payload?

• Nmap

• Wireshark

• msfvenom

• Burp Suite