Font size
S
M
L
XL
WorksheetsModule 3. Exploitation
Total questions: 23
Worksheet time: 12mins
Name
Class
Date
1.
What is the main goal of the exploitation phase?
a)
Break down the systems
b)
Remote code execution
c)
Gain root privileges
d)
Cracking the remote machine password
2.
Which of the following accounts has the least privileges?
a)
Admin
b)
System
c)
Service
d)
User
3.
Which of the following shell types is LESS likely to be blocked by a firewall?
a)
Bind shell
b)
Dumb shell
c)
Fully interactive TTY shell
d)
Reverse shell
4.
Which of the following is NOT a characteristic of staged payloads?
a)
Smaller
b)
Less stable
c)
Sent at once
d)
Has a stager
5.
Which of the following is NOT a characteristic of single payloads?
a)
Larger
b)
More stable
c)
Sent at once
d)
Has a stager
6.
Which of the following is NOT an interface of the Metasploit Framework?
a)
msfconsole
b)
msfvenom
c)
searchsploit
d)
Metasploit Pro
7.
Which of the following is the command to implement an enter to the context of a module in msfconsole?
a)
use
b)
show
c)
run
d)
set
8.
Which of the following is the command to fix a parameter in msfconsole?
a)
use
b)
show
c)
run
d)
set
9.
Which of the following is the command to see the options of a module in msfconsole?
a)
use options
b)
show options
c)
run options
d)
set options
10.
Which of the following is NOT an option to set during exploitation in msfconsole?
a)
RHOSTS
b)
LHOST
c)
PAYLOAD
d)
SHELL
11.
Which of the following parameters is NOT set during exploitation with a bind shell?
a)
RHOSTS
b)
LHOST
c)
PAYLOAD
d)
RPORT
12.
Where do searchsploit takes the exploits from?
a)
National Vulnerability Database
b)
msfconsole
c)
Exploit-db
d)
searchsploit website
13.
Which of the following extensions indicates that an exploit contains information, but not executable code?
a)
.txt
b)
.pl
c)
.py
d)
.php
14.
Which of the following is a CLI tool to generate stand-alone executable payloads?
a)
msfconsole
b)
msfvenom
c)
searchsploit
d)
Metasploit Pro
15.
Which of the following is NOT a delivery method for msfvenom?
a)
Email
b)
Website
c)
Flash drive
d)
Network
16.
Which of the following is NOT an option to set during payload generation with msfvenom?
a)
RHOSTS
b)
LHOST
c)
LPORT
d)
--format
17.
Which format of payload is tailored to Linux targets?
a)
.exe
b)
.txt
c)
.elf
d)
.py
18.
Which format of payload is tailored to Windows targets?
a)
.exe
b)
.txt
c)
.elf
d)
.py
19.
Which of the following is NOT a characteristic of non-interactive "dumb" shells?
a)
Limited commands
b)
Customization
c)
Minimal interactivity
d)
Basic Scripting
20.
Which of the following is NOT a characteristic of fully interactive TTY shells?
a)
High interactivity
b)
Advanced scripting
c)
Rich command set
d)
Not customizable
21.
Which of the following are the two commands to attempt an exploitation in msfconsole? (Pick 2)
a)
use
b)
exploit
c)
run
d)
set
22.
Which of the following Metasploit modules are used during the exploitation phase? (Pick 2)
a)
Auxiliary
b)
Post
c)
Payloads
d)
Exploits
23.
Which of the following are two tools to upgrade a non-interactive shell? (Pick 2)
a)
python
b)
rlwrap
c)
perl
d)
php
Reset
