The Shellshock vulnerability (CVE-2014-6271) allows attackers to execute arbitrary commands via crafted environment variables in Bash. In this example, the malicious command cat /etc/passwd is executed, displaying the contents of the file (which contains system user account info).
Reference - CEH v13 Official Study Guide:
Module 6: Malware Threats
Quote:
"Shellshock allows remote code execution through environment variables processed by Bash. Exploits can be used to run commands like cat /etc/passwd on a vulnerable system." Incorrect Options:
A). No file deletion occurs.
B). It doesn't change passwords.
C). No user addition occurs.

MITRE ATT&CK is a widely used framework that documents adversary tactics, techniques, and procedures (TTPs) observed in real-world cyberattacks. It helps security teams understand attacker behavior, improve detection, and strengthen defensive strategies.

The task involves crafting custom network packets with specific headers to evade firewall filtering.
Colasoft Packet Builder is designed for creating and sending customized packets, making it suitable for testing firewall evasion techniques.

CEH defines botnets as networks of compromised machines controlled remotely to perform coordinated activities such as DDoS attacks, spam campaigns, and credential theft. Systems showing outbound connections to unknown IPs and participating in mass spam dissemination are characteristic indicators of botnet infection.

The correct answer is Hoax. CEH social engineering guidance explains that a hoax is a false warning or fabricated message intended to deceive users into believing that an urgent threat or unusual condition exists.
The attacker's goal is often to provoke confusion, influence behavior, or trigger unnecessary responses even when the message does not contain actual malware or a working exploit. In this scenario, Liam sends a false security alert claiming that all systems will shut down unless employees download a patch. The message is intentionally deceptive, creates alarm, and causes staff to contact IT, which is consistent with a hoax. Spam is merely unsolicited bulk messaging and does not specifically capture the false-warning element. Baiting relies on an enticing offer or object, and pretexting centers on a fabricated scenario used to obtain information or access. CEH materials emphasize that hoaxes are effective because they exploit fear, urgency, and trust in authority. Since the message is a deliberately false operational warning designed to manipulate employee behavior, the best classification is Hoax.