Python for Network Forensics 5.4: Post Enumeration

This lesson focuses on post-enumeration techniques, specifically privilege escalation using a reverse shell. It introduces the Linux Proof Checker script, which identifies privilege escalation vulnerabilities. The script's functionality, including system and network information gathering, is explained. The lesson concludes with practical applications and a preview of data exfiltration techniques.

What is the primary goal of privilege escalation in the context of a threat lifecycle?

• To reduce system privileges

• To gain higher or different privileges

• To delete system logs

• To encrypt user data

What is the Lennox Proof Checker primarily used for?

• To update system software

• To scan for viruses

• To check system performance

• To identify privilege escalation vulnerabilities

Which programming language is the Lennox Proof Checker written in?

• C++

• Java

• Ruby

• Python 2

What is the purpose of transferring the Lennox Proof Checker to a remote host?

• To gather system information for privilege escalation

• To update the host's operating system

• To install new software

• To delete unnecessary files

Which command is used to execute the Lennox Proof Checker script?

• gcc LennoxProofChecker

• python LennoxProofChecker

• bash LennoxProofChecker

• java LennoxProofChecker

What is a common exploit mentioned for older systems in the video?

• Spectre

• Heartbleed

• Meltdown

• 2.6 udev

Why is it important to use a directory scanner on the system?

• To find mismanaged or under-permissioned files

• To increase system speed

• To install new applications

• To delete temporary files