1. Suppose you are working with a /24 block of IP addresses but uncertain of which hosts are live. Intended to minimize screen output to only print the IP addresses responding to pings In order to implement this change in output, what modification could be made to this command?

A) The component >/dev/null of the sequence should be deleted
B) The component || echo 10. 2.$i UNAVAILABLE of the sequence should be deleted
C) The component | nc -nv 10. 3.2 4444 should be added to the end of the command sequence
D) The component > output.txt should be added to the end of the command sequence



2. In Linux privilege escalation, which of the following commands are the most useful while attempting to find potential OS-specific vulnerabilities for exploit? (Choose two)(Select 2answers)

A) uname -r
B) cat/etc/*release
C) sudo -l
D) sudo -V



3. For *nix operating systems, which privilege escalation technique is notable that allows attackers to control program execution on a target system without any need to write and deploy their own shellcode?

A) Heap Spraying
B) Stack Smashing
C) Ret2libc
D) NOP Sled



4. Which of the framework is designed to influence PowerShell to escalate privileges, move laterally and perform other post-exploitation activities in environments of Windows?

A) Mimikatz
B) UnmanagedPowerShell
C) Empire
D) Powersploit



5. Which command-line tool serves as a front-end search tool for exploits detailed in the Exploit Database provided by Offensive Security?

A) Responder
B) Impacket
C) Powersploit
D) Searchsploit