Question 1

Which payload would be the most effective to upload when exploiting a vulnerable file upload feature to gain remote command execution on the server?

Options :

A :

B :

C :

D :

Answer: C

Question 2

During a penetration test, a payload needs to be developed to maintain persistence on the target system after reboot. Which technique can be embedded in the payload for this purpose?

Options :

A : Registry key modification for startup execution

B : Scheduled task creation for session renewal

C : dding the payload to the authorized_keys file

D : mbedding the payload in a cron job

Answer: A

Question 3

Which tool is specifically designed for performing Man-in-the-Middle attacks by intercepting and modifying network traffic?

Options :

A : ttercap, which supports active and passive dissection of many protocols and includes features for network and host analysis.

B : Wireshark, which can capture and analyze packets but cannot redirect traffic.

C : ain & Abel, which can recover passwords and perform some packet sniffing and poisoning.

D : TCPDump, which passively captures packets without the ability to modify or redirect them.

Answer: A

Question 4

What is the essential first step in writing a custom exploit for a buffer overflow vulnerability?

Options :

A : Identifying the exact version and build of the target application.

B : onsulting public exploit databases to find similar vulnerabilities and their exploits.

C : athering intelligence on the network topology of the target organization.

D : Writing a proof of concept code to see if the application crashes.

Answer: A

Question 5

What command would you use to exploit an RCE vulnerability by executing a system shell from a vulnerable PHP web application?

Options :

A : curl -X POST -d "cmd=system('id');" http://vulnerable-site.com/command.php

B : fetch --body-data "run=system('id');" http://vulnerable-site.com/command.php

C : wget --post-data "execute=system('id');" http://vulnerable-site.com/command.php

D : http -f POST http://vulnerable-site.com/command.php cmd="system('id')"

Answer: A

Smartly Prepare Exam with Free Online CPENT Practice Test

Buying Options: