A Penetration Tester Is Performing a Remote Internal Penetration Test

question 106

Multiple Choice

A penetration tester is performing a remote internal penetration test by connecting to the testing system from the Internet via a reverse SSH tunnel. The testing system has been placed on a general user subnet with an IP address of 192.168.1.13 and a gateway of 192.168.1.1. Immediately after running the command below, the penetration tester's SSH connection to the testing platform drops: Which of the following ettercap commands should the penetration tester use in the future to perform ARP spoofing while maintaining a reliable connection?

• A) # sudo ettercap -Tq -w output.cap -M ARP /192.168.1.0/ /192.168.1.255/
• B) # proxychains ettercap -Tq -w output.cap -M ARP /192.168.1.13/ /192.168.1.1/
• C) # ettercap -Tq -w output.cap -M ARP 00:00:00:00:00:00//80 FF:FF:FF:FF:FF:FF//80
• D) # ettercap --safe-mode -Tq -w output.cap -M ARP /192.168.1.2-255/ /192.168.1.13/
• E) # ettercap -Tq -w output.cap -M ARP /192.168.1.2-12;192.168.1.14-255/ /192.168.1.1/

---

Definitions:

Internalize the Externality

The process whereby parties take into account the external costs or benefits of their actions, often through regulatory or market-based mechanisms.

Tragedy of the Commons

A situation in a shared-resource system where individual users acting independently according to their own self-interest behave contrary to the common good of all users by depleting or spoiling that resource.

Excludable

A characteristic of a good or service that means it can be restricted to only those who pay for it; the opposite of a public or non-excludable good.

Rival in Consumption

A characteristic of goods where one individual's consumption prevents or decreases others' ability to consume the same good.