5.2 Tools and Code Analysis Flashcards
Given a scenario, analyze a script or code sample for use in a penetration test.
What are the 3 primary methods of performing reverse engineering?
-Decompilation is the reverse engineering process of translating an executable into high-level source code.
-Disassembly is the reverse engineering process of translating low-level machine code into higher level assembly language code.
-Debugging is the process of manipulating a program’s running state in order to analyze it for general bugs, vulnerabilities and other issues.
What is Bash?
Bash is a scripting language and command shell for Unix-like systems. It is useful for automating tasks through the use of system calls and leveraging existing tools. Bash scripts also support modern programming elements such as loops and conditional statements.
What is PowerShell?
PowerShell is a scripting language and shell for Microsoft Windows that is built on the .NET Framework. PowerShell functions mainly through the use of cmdlets, which are specialized .NET commands that interface with PowerShell.
What is Python?
Python is a popular language for implementing all kinds of development projects, including automation tools and security tools, as well as malicious scripts. Python is designed to be highly readable and use simple, clean syntax.
What is Ruby?
Ruby’s most popular application is in the world of web application development, particularly through the Ruby on Rails framework. Lastly, the Metasploit Framework is also written in Ruby.
What is Perl?
Perl supports a wide range of tasks including system administration and PenTesting. Perl code for a given algorithm can be short and highly compressible.
What is JavaScript?
JacaScript is a scripting language that allows a developer to do all the fancy complex things you see when you visit web pages. JavaScript is used alongside HTML and CSS on the World Wide Web. It is also heavily used in XSS attacks.
