Kahoot -EH-06-P1: Infrastructure Attacks

Question 1

What is a synonym for vulnerability

a. ) integrity
b. ) payload
c. ) risk
d. ) weakness

Answer 1

d.) weakness

Question 2

Exploit DB can be assessed by Kali by ____.

a. ) msfvenom
b. ) ExploitSQL
c. ) SearchSploit
d. ) MetaSploit

Answer 2

c.) SearchSploit

Question 3

All common vulnerabilities and exposures have known exploits T or F

Answer 3

False

Question 4

Metasploit has all the following modules EXCEPT _____

a. ) Search
b. ) Auxilliaries
c. ) Nops
d. ) Encoders

Answer 4

a.) Search

Question 5

Using a reverse shells help mitigate network firewalls T or F

Answer 5

True

Question 6

Which shell payload allows you to take screenshots and migrate process

a. ) shell
b. ) zsh
c. ) meterpreter
d. ) bash

Answer 6

c.) meterpreter

Question 7

Before the victim clicks a reverse shell malware, you must ______

a. ) use Shikata ga ni coder
b. ) set up a listener
c. ) send them an encoded email
d. ) mask the malware extension

Answer 7

b.) set up a listener

Question 8

Eternal Blue was developed by which government agency

a. ) MIB
b. ) NSA
c. ) FBI
d. ) CISA

Answer 8

b.) NSA

Question 9

Once an initial foothold is established, which is program is used to aid in lateral movement

a. ) SSL strip
b. ) Bloodhound
c. ) John the Ripper
d. ) Burp Suite

Answer 9

b.) bloodhound

Question 10

What tool is commonly natively installed on Linux and used by hackers to move files around

a. ) nmap
b. ) wireshark
c. ) netcat
d. ) metasploit

Answer 10

d.) metasploit

Question 11

Which is the first step after the BIOS in the Linux boot order

a. ) MBR
b. ) GRUB
c. ) Init/SystemD
d. ) Kernel

Answer 11

a.) MBR

Question 12

John the Ripper only works with a custom word list T or F

Answer 12

False

Question 13

What tools do you use to combine /etc/passwd and /etc/shadow so that John the ripper can crack the passwords

a. ) Shadow combine
b. ) unshadow
c. ) cmake
d. ) rm john.pot

Answer 13

b.) unshadow

Question 14

What website do you download the actual exploit code

a. ) ExploitDB
b. ) nvd
c. ) MITRE
d. ) CVE

Answer 14

a.) ExploitDB

Question 15

Which exploit did we use to elevate privileges on kernel 2.6 to 3.9

a. ) LinuxElevate
b. ) DirtyCow
c. ) EternalBlue
d. ) CowBoy

Answer 15

b.) DirtyCow

Question 16

Once the exploit is downloaded, you can compile c/c++ exploit code using which tool

a. ) g++
b. ) gCompile
c. ) Visual Studio
d. ) Python Complier

Answer 16

a.) g++`

Question 17

JTR stores passwords it has cracked in a file .john/john.pot

Answer 17

True

Question 18

You can modify an encrypted GRUB menu to load a bash shell without a password T or F

Answer 18

False

Question 19

Which run level is a Multiple user mode with GUI

a. ) Level 6
b. ) Level 3
c. ) Level 5
d. ) Level 4

Answer 19

c.) Level 5