PT0-003: CompTIA PenTest+Demo

By CompTIA · Question Mode

QuestionQ213

Reconnaissance and Enumeration

A penetration tester must gather information transmitted across the network for use in later stages of an internal assessment. Which of the following would most likely achieve this objective?

  • A ntlmrelayx.py -t 192.168.1.0/24 -l 1234
  • B nc -tulpn 1234 192.168.1.2
  • C responder.py -I eth0 -wP
  • D crackmapexec smb 192.168.1.0/24 -u "user" -p "pass123"
Explanation

Responder can listen on a specified network interface and use name-service/WPAD poisoning to solicit and capture authentication data transmitted by network clients. This makes it suitable for collecting network-borne information for subsequent assessment activities.

Community Discussion

No comments yet. Be the first to start the discussion!