Free Preparation Discussions
MENU
CompTIA Exam PT0-003 Topic 3 Question 16 Discussion
Topic #: 3
A penetration tester wants to maintain access to a compromised system after a reboot. Which of the following techniques would be best for the tester to use?
Capabilities: BeEF is equipped with modules to create CSRF attacks, capture session tokens, and gather sensitive information from the target user's browser session.
Drawbacks: While useful for reconnaissance, Maltego is not designed for exploiting web vulnerabilities like CSRF.
Metasploit (Option C):
Capabilities: While Metasploit can exploit some web vulnerabilities, it is not specifically tailored for CSRF attacks as effectively as BeEF.
Drawbacks: It does not provide capabilities for exploiting CSRF vulnerabilities.
Conclusion: The Browser Exploitation Framework (BeEF) is the most suitable tool for leveraging a CSRF vulnerability to gather sensitive details from an application's end users. It is specifically designed for browser-based exploitation, making it the best choice for this task.
Maltego (Option B):
theHarvester (Option D):
Portia
2 months agoPearly
1 months agoChun
1 months agoTimothy
2 months agoGail
3 months agoKarl
1 months agoValda
2 months agoDell
2 months agoWava
3 months agoHobert
1 months agoKrissy
2 months agoChauncey
2 months agoTimmy
3 months agoCory
3 months agoMaryann
2 months agoTamar
3 months agoEllsworth
3 months agoQueenie
3 months agoSheldon
4 months ago