Question 571
A penetration tester is evaluating an organization's endpoint security controls. During testing, a known malware sample is detected immediately based on its file signature, while a slightly modified version is not. What limitation of the security product is MOST clearly demonstrated?
Question 572
Jim, a professional hacker, targeted an organization that is operating critical Industrial Infrastructure. Jim used Nmap to scan open pons and running services on systems connected to the organization's OT network. He used an Nmap command to identify Ethernet/IP devices connected to the Internet and further gathered Information such as the vendor name, product code and name, device name, and IP address. Which of the following Nmap commands helped Jim retrieve the required information?
Question 573
During a red team engagement for a client in the financial sector, ethical hacker Tyler Brooks conducts a phishing campaign using a crafted internal web page disguised as a company VPN login. After several users enter their credentials, Tyler confirms that the payload successfully recorded input without triggering antivirus or requiring local installation privileges. The captured keystrokes came exclusively from a web-based form embedded in the fake login page. Based on the technique used, which type of keylogger did Tyler most likely deploy?
Question 574
You are an ethical hacker at SecurePath Technologies, hired to conduct a penetration test for Horizon Financial, a U.S.-based credit union in Denver, Colorado. While testing their online banking portal, you enter a crafted input into the login form's username field. The application unexpectedly returns a full list of customer account details, including names and account numbers, appended to the intended login response. The behavior suggests that your input was used to append a malicious query to the requested query, altering the original SQL statement to retrieve additional data beyond the expected result. Based on the observed behavior, which type of SQL injection attack are you exploiting?
Question 575
During a late-night authorized assessment at a smart manufacturing plant on the outskirts of Seoul, South Korea, penetration tester Ji-Hoon Park set up his mobile testing station in a company vehicle parked within wireless range of the facility. He first ran nmap -p 80,81,8080,8081 192.168.10.0/24 to locate IoT devices exposing web services. After identifying his wireless adapter with ifconfig, he executed airmon-ng start wlan0 to enable monitor mode, then launched airodump-ng wlan0mon to scan for nearby networks and noted the target network operating on channel 11. He subsequently configured the interface to listen on that channel and opened Wireshark on the monitor interface to begin capturing live traffic.
The captured packets revealed detailed information about connected IoT sensors and their communication patterns without any direct interaction with the target devices.
Identify the technique used to collect the observed network data.
The captured packets revealed detailed information about connected IoT sensors and their communication patterns without any direct interaction with the target devices.
Identify the technique used to collect the observed network data.