Crowdly
Add to Chrome
IT7301 - Ethical Hacking
Looking for IT7301 - Ethical Hacking test answers and solutions? Browse our comprehensive collection of verified answers for IT7301 - Ethical Hacking at moodle.polytechnic.bh.
Get instant access to accurate answers and detailed explanations for your course questions. Our community-driven platform helps students succeed!
You are conducting a vulnerability scan on a client’s network (172.16.1.0/24) using OpenVAS. The scan identifies a critical vulnerability (CVE-2017-0143) on a Windows machine. Based on the CVSS 3.1 metrics, what is the most likely Attack Vector (AV) for this SMB-related vulnerability?
You are conducting a vulnerability scan on a client’s network (172.16.1.0/24) using OpenVAS. The scan identifies a critical vulnerability (CVE-2017-0143) on a Windows machine. Based on the CVSS 3.1 metrics, what is the most likely Attack Vector (AV) for this SMB-related vulnerability?
You are conducting a vulnerability scan on a client’s network (172.16.1.0/24) using OpenVAS. The scan identifies a critical vulnerability (CVE-2017-0143) on a Windows machine. Based on the CVSS 3.1 metrics, what is the most likely Attack Vector (AV) for this SMB-related vulnerability?
You are conducting a vulnerability scan on a client’s network (172.16.1.0/24) using OpenVAS. The scan identifies a critical vulnerability (CVE-2017-0143) on a Windows machine. Based on the CVSS 3.1 metrics, what is the most likely Attack Vector (AV) for this SMB-related vulnerability?
The following is the NMAP scan report . Identify the type of scan based on the output.
kali@kali:~$ nmap 192.168.56.104
Starting Nmap 7.94 ( https://nmap.org ) at 2024-09-28 15:32 EDTNmap scan report for 192.168.56.104Host is up (0.0029s latency).Not shown: 977 closed tcp ports (conn-refused)
PORT STATE SERVICE VERSION21/tcp open ftp vsftpd 2.3.422/tcp open ssh OpenSSH 4.7p1 Debian 8ubuntu1 (protocol 2.0)23/tcp open telnet Linux telnetd25/tcp open smtp Postfix smtpd53/tcp open domain ISC BIND 9.4.280/tcp open http Apache httpd 2.2.8 ((Ubuntu) DAV/2)109/tcp open pop3 Dovecot pop3d139/tcp open netbios-ssn Samba smbd 3.X - 4.X (workgroup: WORKGROUP)445/tcp open netbios-ssn Samba smbd 3.X - 4.X (workgroup: WORKGROUP)512/tcp open exec netkit-rsh rexecd513/tcp open login?514/tcp open shell Netkit rshd1099/tcp open java-rmi GNU Classpath grmiregistry1524/tcp open bindshell Metasploitable root shell2049/tcp open nfs 2-4 (RPC #100003)2121/tcp open ftp ProFTPD 1.3.13306/tcp open mysql MySQL 5.0.51a-3ubuntu55432/tcp open postgresql PostgreSQL DB 8.3.0 - 8.3.75900/tcp open vnc VNC (protocol 3.3)
As part of a controlled network stress test, a security analyst wants to determine whether a target web server will mishandle overlapping TCP/IP fragments and exhaust reassembly resources (a Teardrop-style test). The analyst intends to send many TCP SYN packets to port 80, force IP fragmentation, and set the TCP MSS to encourage fragments that can overlap when reassembled.
Which single hping3 command below best matches that intent?
hping3 in Kali Linux. During the attack, they execute a terminal loop script to continuously audit the availability of the target's web server at http://192.168.56. The script returns the following real-time outputs: attack code=000 time=2.002860sattack code=000 time=2.003217sattack code=000 time=2.001850sattack code=000 time=2.000900sattack code=000 time=2.002166s Based on these specific outputs, what is the current state of the victim's web server?A network administrator at XYZ Corp notices unusual traffic from an external IP address targeting their network devices. Upon investigation, it is found that the attacker is using SNMP queries to gather information about routers and switches. The attacker successfully retrieves the ARP table and routing information. What is the MOST likely reason the attacker was able to enumerate SNMP successfully?