Common Attack Techniques

Question 1

Cross Compiling Code

Answer 1

• compiling on linux for windows using tools like mingw-w64

Question 2

Exploit Modification

Answer 2

• may need to modify exploits to get past organization security
• encrypting or decoding an exploit to avoid detection by antivirus

Question 3

Proof of Concept Development

Answer 3

• new or custom exploits require testing before using in pentest
• build a virtual machine based on specifications you earned during enumeration

Question 4

Social Engineering

Answer 4

• involves manipulating people to get information or to gain access, often uses deception and lies

Question 5

Credential Brute Forcing

Answer 5

• attempt to crack password or authentication system to gain access, cracking passwords from hash file, password guessing

Question 6

Dictionary Attack

Answer 6

• brute force attack that uses dictionary of commonly used usernames and passwords

Question 7

Rainbow Tables

Answer 7

• pre computed hash values of known usernames and passwords used for offline password file cracking