PenTest+ concepts

Question 1

Which tools are used for password cracking?

Answer 1

• Hydra
• John the Ripper

Question 2

What tool is used for SQL injection attacks?

Answer 2

• Sqlmap

Question 3

What tool is used to automate exploit development and execution against a vulnerable target system?

Answer 3

• Metasploit is a framework used for developing and executing exploits against remote targets.

Question 4

What technique is best to maintain access to a compromised system after a reboot or if the initial exploit is closed?

Answer 4

• Setting up a cron job is a common post-exploitation technique used to maintain persistence by ensuring a reverse shell or another method of access is re-established at regular intervals.

Question 5

What techniques are useful for covering tracks or gaining further access?

Answer 5

• Clear system logs
• Escalate privileges
• Use PsExec for lateral movement