Post Exploitation (Basics)

Question 1

What is pivoting?

Answer 1

Pivoting is the action of moving from host to host through compromise. So in a network the attacker can obtain access to systems that are not directly accessible.

Question 2

What is the main goal of a clean up following a pentester’s perpective?

Answer 2

The main goal is to leave the network the same as it was before you entered it, for example:
* Remove executables, scripts and any other added files;
* Remove added accounts;
* Set system and apps settings back to original configuration.

Question 3

What is the main goal of a clean up following a hacker’s perspective?

Answer 3

The main goal is to make it look like you were never there. Delete your traces from log files.

Question 4

Why can using Metasploit for persistence be dangerous?

Answer 4

Because it provides unauthenticated access that could be used by another user. It will open a port and leave it exposed.