Question 1mediummultiple choice
Read the full Information Gathering and Vulnerability Scanning explanation →PT0-002 Information Gathering and Vulnerability Scanning • Complete Question Bank
Complete PT0-002 Information Gathering and Vulnerability Scanning question bank — all 0 questions with answers and detailed explanations.
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag a concept onto its matching description — or click a concept then click the description.
Network scanning and port enumeration
Exploit development and execution
Web application security testing
Password cracking
Network packet analysis
Drag a concept onto its matching description — or click a concept then click the description.
Rogue AP mimicking a legitimate one
Forcing clients to disconnect from AP
Brute-forcing the WPS PIN to recover passphrase
Exploiting WPA2 handshake to decrypt traffic
Sending unsolicited messages over Bluetooth
Refer to the exhibit. Nmap scan report for 192.168.1.10 Host is up (0.0012s latency). PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 443/tcp open https 3306/tcp open mysql MAC Address: 00:1A:2B:3C:4D:5E (Intel) Device type: general purpose Running: Linux 2.6.X OS CPE: cpe:/o:linux:linux_kernel:2.6 OS details: Linux 2.6.18 - 2.6.22
Refer to the exhibit. [Sun Mar 13 12:00:00.123456 2024] [php:notice] [pid 1234] [client 192.168.1.5:54321] PHP Notice: Undefined variable: username in /var/www/html/login.php on line 32 [Sun Mar 13 12:00:01.234567 2024] [php:warning] [pid 1234] [client 192.168.1.5:54321] PHP Warning: mysqli_connect(): (HY000/1045): Access denied for user 'test'@'localhost' (using password: YES) in /var/www/html/db.php on line 8
Refer to the exhibit.
{
"authenticators": {
"LDAP": {
"servername": "ldap.internal.com",
"port": 389,
"binddn": "cn=admin,dc=internal,dc=com",
"bindpassword": "S3cur3#pass",
"usessl": false
}
}
}Refer to the exhibit.
{
"vulnerability": "SQL Injection",
"cvss_score": 9.8,
"affected_endpoint": "/api/user?id=1",
"request_method": "GET",
"parameter": "id",
"payload": "' OR '1'='1",
"evidence": "Error: You have an error in your SQL syntax;"
}Nmap scan report for 192.168.1.10 Host is up (0.0010s latency). PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 445/tcp open microsoft-ds 3389/tcp open ms-wbt-server Nmap done: 1 IP address (1 host up) scanned in 10.00 seconds