Post-exploitation and pivoting in Cybersecurity - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Post-exploitation Goals

After successfully exploiting a system, what is the primary goal of post-exploitation activities?

A To maintain access and gather further information from the compromised system

B To immediately delete all logs and evidence of the attack

C To scan the internet for new vulnerable targets

D To install antivirus software to protect the system

💡 Hint

Think about what an attacker wants to do after gaining control of a system.

Post-exploitation focuses on maintaining control and collecting valuable data from the compromised system, not on unrelated tasks like scanning the internet or installing antivirus.

📋 Factual

intermediate

Pivoting Techniques in Cybersecurity

Which of the following best describes the concept of pivoting in a cyberattack?

A Using a compromised system to attack other systems within the same network

B Directly attacking a system from the internet without any intermediate steps

C Installing malware on a user's personal device only

D Encrypting data to prevent unauthorized access

💡 Hint

Pivoting involves moving from one system to another inside a network.

Pivoting means using a compromised machine as a stepping stone to reach other machines in the network that are not directly accessible.

🔍 Analysis

advanced

Analyzing a Post-exploitation Scenario

An attacker has gained access to a server inside a corporate network. They want to move laterally to a database server that is not accessible from outside. Which method would best allow this pivot?

A Scan the internet for the database server's IP address and attack directly

B Set up a SOCKS proxy on the compromised server and route traffic through it

C Send phishing emails to employees to get credentials

D Install antivirus software on the compromised server

💡 Hint

Think about how attackers use compromised machines to reach internal resources.

Setting up a SOCKS proxy on the compromised server allows the attacker to route their traffic through it, effectively pivoting into the internal network to reach the database server.

❓ Comparison

advanced

Comparing Pivoting Methods

Which of the following statements correctly compares VPN pivoting and port forwarding pivoting?

A Neither method allows access to internal network resources

B Port forwarding creates a full network tunnel, while VPN pivoting redirects specific ports

C VPN pivoting creates a full network tunnel, while port forwarding only redirects specific ports

D Both methods only redirect specific ports without creating a network tunnel

💡 Hint

Consider the scope of access each method provides.

VPN pivoting establishes a full network tunnel, allowing access to all network resources, whereas port forwarding only redirects traffic for specific ports.

❓ Reasoning

expert

Identifying the Outcome of a Pivoting Setup

An attacker sets up SSH local port forwarding from their machine to a remote internal web server through a compromised jump host. What is the expected result of this setup?

A The attacker can access all internal network services without restrictions

B The attacker can only access the jump host but not the internal web server

C The attacker loses access to the jump host after setting up port forwarding

D The attacker can access the internal web server by connecting to a local port on their machine

💡 Hint

Think about what local port forwarding does in SSH.

SSH local port forwarding forwards a port on the attacker's local machine to a port on the remote internal server via the jump host, allowing access through the local port.