Authentic attacks

Question 1

What is a Pass-the Ticket attack?

Answer 1

aim to steal kerberos tickets

Question 2

What is Kerberoasting?

Answer 2

Post compromise attack used for cracking Microsoft AD service account passwords

Question 3

Credential Stuffing uses

Answer 3

reuses known passwords

Question 4

SPN stands for?

Answer 4

Service Principle Name and is used in Kerberos systems

Question 5

LOLBins stand for?

Answer 5

Living of te Land attack

Question 6

Prowler is used for?

Answer 6

Security audits on AWS

Question 7

Is Prowler python based?

Answer 7

Yes

Question 8

Is Scout Suit open scource?

Answer 8

yes

Question 9

Scout Suit is used for?

Answer 9

performing security assessments on cloud environments

Question 10

Can Scout Suit be Agentless?

Answer 10

Yes

Question 11

Reflected XSS is

Answer 11

attacker input (usually from a URL, form or header) is reflected by the server

Question 12

DOM XSS lives

Answer 12

entirely in client-side JavaScript