CREST CPSA COMPREHENSIVE EXAM UPDATED QUESTIONS AND ANSWERS FIRM A.pdf

CREST CPSA COMPREHENSIVE EXAM UPDATED
QUESTIONS AND ANSWERS FIRM A+
✔✔Litespeed - ✔✔LiteSpeed Tech Web Server

✔✔MS-SQL : DB Version - ✔✔SELECT @@version

EXEC xp_msver
(detailed version info)

✔✔MS-SQL : Run OS Command - ✔✔EXEC master..xp_cmdshell 'net user'

✔✔MS-SQL : SELECT commands - ✔✔SELECT HOST_NAME( ) : Hostname and IP

SELECT DB_NAME ( ) : Current DB

SELECT name FROM master..sysdatabases; : List DBs

SELECT user_name ( ) : Current user

SELECT name FROM master..syslogins : List users

SELECT name FROM master..sysobjects WHERE xtype='U'; : List Tables

SELECT name FROM syscolumns WHERE id=(SELECT id FROM sysobjections
WHERE name='mytable'); : List columns

✔✔MS-SQL : List all Tables and Columns - ✔✔SELECT name FROM syscolumns
WHERE id = (SELECT id FROM sysobjects WHERE name = 'mytable')

✔✔MS-SQL : System Table (Info on All Tables) - ✔✔SELECT TOP 1 TABLE_NAME
FROM INFORMATION_SCHEMA.TABLES

✔✔MS-SQL 2005 Vulnerability (Password Hashes) - ✔✔SELECT name,
password_hash FROM master.sys.sql_logins

✔✔Postgres : SELECT commands - ✔✔SELECT version(); : DB Version

SELECT inet_server)addr(); : Hostname and IP

SELECT current_database(); : Current DB

SELECT datname FROM pg_database; : List DBs

SELECT user; : Current user

,SELECT username FROM pg_user; : List Users

SELECT username,passwd FROM pg_shadow : List password hashes

✔✔MySQL Default Credentials - ✔✔root | MYSQL

✔✔MySQL : SELECT Commands - ✔✔SELECT @@version; : DB Version

SELECT @@hostname; : Hostname and IP

SELECT database(); : Current DB

SELECT distinct (db) FROM mysql.db; : List DBs

SELECT user(); : Current user

SELECT user FROM mysql.user; : List Users

SELECT host,user,password FROM mysql.user; : List password hashes

✔✔MySQL : List Tables (and Columns) - ✔✔SHOW TABLES (only works for current
database)

SELECT * FROM information_schema.columns (full dump)

✔✔Oracle : SELECT Commands - ✔✔SELECT * FROM v$version; : DB Version
(SELECT version FROM v$instance;)

SELECT instance_name FROM v$instance : Current DB
(SELECT name FROM v$database;)

SELECT DISTINCT owner FROM all_tables; : List DBs

SELECT user FROM dual; : Current User

SELECT username FROM all_users ORDER BY username; : List users

SELECT column_name FROM all_tab_columns; : List Columns

SELECT table_name FROM all_tables; : List Tables

SELECT name, password, astatus FROM sys.user$; : List password hashes

✔✔host.equiv (or .rhosts file) Structure - ✔✔Allow any user to log in from any host:

, +

Allow any user from host with a matching local account to log in:

host

Allow any user from host to log in:

host +

Allow user from host to log in as any non-root user:

host user

Allow all users with matching local accounts from host to log in except for baduser:

host -baduser
host

Deny all users from host:

-host

Allow all users with matching local accounts on all hosts in a netgroup:

+@netgroup

Disallow all users on all hosts in a netgroup:

-@netgroup

Allow all users in a netgroup to log in from host as any non-root user:

host +@netgroup

Allow all users with matching local accounts on all hosts in a netgroup except baduser:

+@netgroup -baduser
+@netgroup

✔✔Linux Shell Breakouts - ✔✔python -c 'import pty;pty.spawn("/bin/bash")'

echo os.system('/bin/bash')

/bin/sh -i