Hacker methodology

Question 1

Methodology

Answer 1

Cracking Password
    Escalating Privileges
    Executing Applications
    Hiding Files
    Covering Tracks

Question 2

hacking Goals

Answer 2

Bypass the access control
Gain access to the system
Exploit vulnerabilities
Gain privileges
Execute applications
Hide malicious activities
Hide the evidence of compromising

Question 3

Registered dlls key

Answer 3

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\

Question 4

what is done during the “executing application” phase

Answer 4

Install malware to collect information
    Setup Backdoor to maintain access
    crack passwords and scripts
    Install Keylogger
    etc...

Question 5

what occurs during gaining access (ceh Hacking goals)

Answer 5

Cracking Passwords

Escalating Privileges

Question 6

what occurs during maintaining access (ceh Hacking goals)

Answer 6

Executing applications

Hiding Files

Question 7

what occurs during clearing tracks (ceh Hacking goals)

Answer 7

deleting logs

Question 8

what is Enumeration

Answer 8

the process of extracting user names, machine names, network resources, shares and services from a system. In this phase, the attacker creates an active connection to the system and performs directed queries to gain more information about the target.

Question 9

what is Enumeration

Answer 9

the process of extracting user names, machine names, network resources, shares and services from a system. In this phase, the attacker creates an active connection to the system and performs directed queries to gain more information about the target.

Question 10

Link-local Multicast Name Resolution/ NetBios Name Service attack

Answer 10

Victim uses service to find resource. Attacker broadcasts that they are the resource and poisons Victims service. This is multicast. If the interaction require authentication victim sends NTLNv2 user name and hash. offline cracking.

Question 11

three phases of a pen test

Answer 11

preparation, assessment (security or conduct phase), conclusion (post-assessment phase)