CST EXAM ACTUAL EXAM VERSIONS
(VERSION A AND B) COMPLETE
QUESTIONS WITH DETAILED VERIFIED
ANSWERS (100% CORRECT
ANSWERS) /ALREADY GRADED A+
1. Exploitation - answer-
Define: exploit, exploitation, shellcode, payload, mix‐and‐match approach, meterpreter -
answer-SHELLCODE=set of instructions used during exploitation
PAYLOAD=code attacker wants the system to execute once exploited
ex. add new users, install software, open backdoors, change files
Mix-and-Match Approach=
-interchangeable payload
-no specific exploit
-must be compatible - answer-Mix-and-Match Steps=
1. Identify a target
2. Select an exploit
3. Set exploit options
4. Select a payload
5. Set payload options
6. Exploit
METERPRETER(Meta-Interpreter)= - answer--command SHELL
-made for metasploit
=runs ONLY in memory
EXPLOIT=code run to take advantage of vulnerability (gain administrative access) -
answer-EXPLOITATION=launching of an exploit
(wide range & vary)
Know the major types of payload in Metasploit and the difference between bind_tcp and
reverse_tcp. - answer-Metasploit=exploit framework(formal structure)
Payloads==>
meterpreter/shell/vncinject
bind_tcp =
, -creates connection
-from attacker to target
meterpreter/shell/reverse_tcp =
-creates reverse connection
-from hacker to target
adduser & exe
Be able to set some common options for exploits and payloads, e.g., LHOST, RHOST,
LPORT. - answer-OPTIONS=
-context specific
for exploit & payload
ex.
nsf exploit() > show options
> set lhost 10.1.41.220
show options, exploit, lhost, show options, explot
Hash - answer--verifies integrity
-one single character change will cause the hash to be dramatically different.
What is privilege escalation? How to achieve it with password attacks? What are online
and offline attacks on passwords? Know Microsoft's password hashing algorithms -
answer-Privilege Escalation=
-gaining access to more powerful accounts
ex. password cracking
1. Hashed Passwords=
/etc/shadow
-ONLY viewable by root
2. Impersonation=pass the hashed password (lazy)
Know some major post‐exploitation actions and their related meterpreter commands. -
answer-Post-Exploitation=
-attacker wants to maintain access to target system(trojans, backdoors, NetCat)
Describe the following information‐hiding methods: rootkit, steganography, alternate
data stream. - answer-ROOTKIT=
-trojan
-gives backdoor access
-take normal programs with OS and replace them with malicious versions
STEGNOGRAPHY=
(VERSION A AND B) COMPLETE
QUESTIONS WITH DETAILED VERIFIED
ANSWERS (100% CORRECT
ANSWERS) /ALREADY GRADED A+
1. Exploitation - answer-
Define: exploit, exploitation, shellcode, payload, mix‐and‐match approach, meterpreter -
answer-SHELLCODE=set of instructions used during exploitation
PAYLOAD=code attacker wants the system to execute once exploited
ex. add new users, install software, open backdoors, change files
Mix-and-Match Approach=
-interchangeable payload
-no specific exploit
-must be compatible - answer-Mix-and-Match Steps=
1. Identify a target
2. Select an exploit
3. Set exploit options
4. Select a payload
5. Set payload options
6. Exploit
METERPRETER(Meta-Interpreter)= - answer--command SHELL
-made for metasploit
=runs ONLY in memory
EXPLOIT=code run to take advantage of vulnerability (gain administrative access) -
answer-EXPLOITATION=launching of an exploit
(wide range & vary)
Know the major types of payload in Metasploit and the difference between bind_tcp and
reverse_tcp. - answer-Metasploit=exploit framework(formal structure)
Payloads==>
meterpreter/shell/vncinject
bind_tcp =
, -creates connection
-from attacker to target
meterpreter/shell/reverse_tcp =
-creates reverse connection
-from hacker to target
adduser & exe
Be able to set some common options for exploits and payloads, e.g., LHOST, RHOST,
LPORT. - answer-OPTIONS=
-context specific
for exploit & payload
ex.
nsf exploit() > show options
> set lhost 10.1.41.220
show options, exploit, lhost, show options, explot
Hash - answer--verifies integrity
-one single character change will cause the hash to be dramatically different.
What is privilege escalation? How to achieve it with password attacks? What are online
and offline attacks on passwords? Know Microsoft's password hashing algorithms -
answer-Privilege Escalation=
-gaining access to more powerful accounts
ex. password cracking
1. Hashed Passwords=
/etc/shadow
-ONLY viewable by root
2. Impersonation=pass the hashed password (lazy)
Know some major post‐exploitation actions and their related meterpreter commands. -
answer-Post-Exploitation=
-attacker wants to maintain access to target system(trojans, backdoors, NetCat)
Describe the following information‐hiding methods: rootkit, steganography, alternate
data stream. - answer-ROOTKIT=
-trojan
-gives backdoor access
-take normal programs with OS and replace them with malicious versions
STEGNOGRAPHY=
