GCIA: GIAC Certified Intrusion AnalystDemo

Question

Adam, a malicious hacker, performs the exploit shown below. What is the expected result of this exploit?

A Opens up a SMTP server that requires no username or password
B Creates a share called "sasfile" on the target system
C Creates an FTP server with write permissions enabled
D Opens up a telnet listener that requires no username or password

Explanation

The command nc -l -p 53 -e cmd.exe starts a Netcat listener on port 53 and attaches cmd.exe to incoming connections. Because no authentication is configured, a remote client can obtain an unauthenticated command-shell session through a telnet-style connection.

GCIA: GIAC Certified Intrusion AnalystDemo

AstroTutor

Notes

Readiness

QuestionQ348

Community Discussion