CREST CPSA:Key Concepts and Definations 2025
%SYSTEMDRIVE%\boot.ini - ansContains the boot options for computers with BIOS firmware running NT-based
operating system prior to Windows Vista
%SYSTEMROOT%\repair\SAM
%SYSTEMROOT%\System32\config\RegBack\SAM - ansStores Windows users' passwords in a hashed format (in
LM hash and NTLM hash). These are backups of C:\windows\system32\config\SAM
1.3.6.1.2.1.25.1.6.0
System Processes
1.3.6.1.2.1.25.4.2.1.2
Running Programs
1.3.6.1.2.1.25.4.2.1.4
Processes Path
1.3.6.1.2.1.25.2.3.1.4
Storage Units
1.3.6.1.2.1.25.6.3.1.2
Software Name
1.3.6.1.2.1.77.1.2.25
User Accounts
1.3.6.1.2.1.6.13.1.3
TCP Local Ports - ansMicrosoft SNMP
1000BaseT - ansGigabit Ethernet
1 GB
,100BaseT - ans"Fast Ethernet"
100 Mbps
10BaseT - ansLAN (Ethernet)
10 Mbps
3DES - ans168 bit key encryption (48 cycles)
A / AAAA Record - ansIP Address
Active OS Fingerprinting - ansSends specially crafted packets to the remote OS and analyzes the received
response.
NMap is awesome at this
AES (Advanced Encryption Standard) - ansA block cypher created in the late 1990s that uses a 128-bit block size
and a 128-, 129-, or 256-bit key size.
Apache / Tomcat - ansApache Web Servers
APIPA - ansAutomatic Private Internet Protocol Addressing
ARP - ansAddress Resolution Protocol
Asymmetric Encryption - ansRSA
El Gamal
ECC Eliptic Curve
,Diffie-Helman (Key Exchange)
Paillier
Merkle-Helman
Cramer-Shoup
Base64 Encoding - ansAn encoding scheme which represents any binary data using only printable ASCII
characters. Usually used for encoding email attachments over SMTP
Basel Accord - ansan agreement that required that banks hold as capital at least 8% of their risk-weighted
assets
BGP - ansBorder Gateway Protocol
Border Gateway Protocol (BGP) - ansA standardized exterior gateway protocol designed to exchange routing
and reach-ability information among autonomous systems on the Internet. The protocol is classified as a path
vector protocol.
Cat 5 - ansCategory 5 wire, a TIA/EIA standard for UTP wiring that can operate at up to 100 Mbps.
CAT5 - anstype of cable that has the ability to transfer information from one computer to another
CDMA - ansCode Division Multiple Access (GSM competitor)
CDP - ansCisco Discovery Protocol
Cisco Discovery Protocol (CDP) - ansa Cisco proprietary Layer 2 protocol to gather information about
neighboring Cisco devices
Cisco Password Encryption - anssecret 4 : Crappy SHA256
, secret 5 : Salted MD5
secret 7: Crappy Cisco encryption to prevent cleartext in the config
secret 8 : PBKDF2 (Password-Based Key Derivation Function 2) *bruteforce target*
secret 9 : scrypt (BINGO)
Classful IP Range : Class A - ans128 Networks (2^7), 16,777,216 Addresses per network (2^24)
Range : 0.0.0.0-127.0.0.0
Default Subnet Mask : 255.0.0.0
CIDR Notation : /8
Classful IP Range : Class B - ans16,384 Networks (2^14), 65,536 Addresses per network (2^16)
Range : 128.0.0.0-191.255.0.0
Default Subnet Mask : 255.255.0.0
CIDR Notation : /16
Classful IP Range : Class C - ans2,097,152 Networks (2^21), 256 Addresses per network (2^8)
Range : 192.0.0.0-223.255.255.0
Default Subnet Mask : 255.255.255.0
CIDR Notation : /24
Classful IP Range Calculation - ansIf the first bit is a "0", it's a class A address (Half the address space has a "0"
for the first bit, so this is why class A takes up half the address space.)
If the second bit is a "0", it's a class B address (Half of the remaining non-class-A addresses, or one quarter of
%SYSTEMDRIVE%\boot.ini - ansContains the boot options for computers with BIOS firmware running NT-based
operating system prior to Windows Vista
%SYSTEMROOT%\repair\SAM
%SYSTEMROOT%\System32\config\RegBack\SAM - ansStores Windows users' passwords in a hashed format (in
LM hash and NTLM hash). These are backups of C:\windows\system32\config\SAM
1.3.6.1.2.1.25.1.6.0
System Processes
1.3.6.1.2.1.25.4.2.1.2
Running Programs
1.3.6.1.2.1.25.4.2.1.4
Processes Path
1.3.6.1.2.1.25.2.3.1.4
Storage Units
1.3.6.1.2.1.25.6.3.1.2
Software Name
1.3.6.1.2.1.77.1.2.25
User Accounts
1.3.6.1.2.1.6.13.1.3
TCP Local Ports - ansMicrosoft SNMP
1000BaseT - ansGigabit Ethernet
1 GB
,100BaseT - ans"Fast Ethernet"
100 Mbps
10BaseT - ansLAN (Ethernet)
10 Mbps
3DES - ans168 bit key encryption (48 cycles)
A / AAAA Record - ansIP Address
Active OS Fingerprinting - ansSends specially crafted packets to the remote OS and analyzes the received
response.
NMap is awesome at this
AES (Advanced Encryption Standard) - ansA block cypher created in the late 1990s that uses a 128-bit block size
and a 128-, 129-, or 256-bit key size.
Apache / Tomcat - ansApache Web Servers
APIPA - ansAutomatic Private Internet Protocol Addressing
ARP - ansAddress Resolution Protocol
Asymmetric Encryption - ansRSA
El Gamal
ECC Eliptic Curve
,Diffie-Helman (Key Exchange)
Paillier
Merkle-Helman
Cramer-Shoup
Base64 Encoding - ansAn encoding scheme which represents any binary data using only printable ASCII
characters. Usually used for encoding email attachments over SMTP
Basel Accord - ansan agreement that required that banks hold as capital at least 8% of their risk-weighted
assets
BGP - ansBorder Gateway Protocol
Border Gateway Protocol (BGP) - ansA standardized exterior gateway protocol designed to exchange routing
and reach-ability information among autonomous systems on the Internet. The protocol is classified as a path
vector protocol.
Cat 5 - ansCategory 5 wire, a TIA/EIA standard for UTP wiring that can operate at up to 100 Mbps.
CAT5 - anstype of cable that has the ability to transfer information from one computer to another
CDMA - ansCode Division Multiple Access (GSM competitor)
CDP - ansCisco Discovery Protocol
Cisco Discovery Protocol (CDP) - ansa Cisco proprietary Layer 2 protocol to gather information about
neighboring Cisco devices
Cisco Password Encryption - anssecret 4 : Crappy SHA256
, secret 5 : Salted MD5
secret 7: Crappy Cisco encryption to prevent cleartext in the config
secret 8 : PBKDF2 (Password-Based Key Derivation Function 2) *bruteforce target*
secret 9 : scrypt (BINGO)
Classful IP Range : Class A - ans128 Networks (2^7), 16,777,216 Addresses per network (2^24)
Range : 0.0.0.0-127.0.0.0
Default Subnet Mask : 255.0.0.0
CIDR Notation : /8
Classful IP Range : Class B - ans16,384 Networks (2^14), 65,536 Addresses per network (2^16)
Range : 128.0.0.0-191.255.0.0
Default Subnet Mask : 255.255.0.0
CIDR Notation : /16
Classful IP Range : Class C - ans2,097,152 Networks (2^21), 256 Addresses per network (2^8)
Range : 192.0.0.0-223.255.255.0
Default Subnet Mask : 255.255.255.0
CIDR Notation : /24
Classful IP Range Calculation - ansIf the first bit is a "0", it's a class A address (Half the address space has a "0"
for the first bit, so this is why class A takes up half the address space.)
If the second bit is a "0", it's a class B address (Half of the remaining non-class-A addresses, or one quarter of
