Question 1

Using netcat, cryptcat, or ncat to transfer files across a network is a common practice for a pentester because any port that will pass through the filters between the target and tiger box can be used. Which of the following commands will transfer a binary file on a commonly unfiltered web port?

Accepted Answer

Using nc, setup a listenr to receive udp traffic on port 8080 and direct the data to a file called foo.txt.
Other common "web ports" are 80, 81 and 443. Port 1080 is for the socks protocol.

Question 2

Baxter has been told he must install a new IDS. State requlations require it to have a "Time Based Induction Machine" in the detection engine. What type of IDS is Baxter going to use?

Accepted Answer

"TIM"s are used in behavioral analysis engines for host based instrusion detection systems.

Question 3

Cisco devices use a protocol called CDP (Cisco Discovery Protocol) that allows routers to share information about each other. These messages can sometimes be sniffed. What is the destination MAC address for a CDP message?

Accepted Answer

The first byte denotes this as a multicast. Also the character "c" a lot would make that a good guess.

Question 4

When logging into an IRC server, what two commands must be passed by the IRC client?

Accepted Answer

When logging into an IRC server, a username is provided to the system but then nick is used to identify the user in chatrooms. The nick must be unique within the entire network.

Quiz 5: Networks and Services

Using netcat, cryptcat, or ncat to transfer files across a network is a common practice for a pentester because any port that will pass through the filters between the target and tiger box can be used. Which of the following commands will transfer a binary file on a commonly unfiltered web port?

Baxter has been told he must install a new IDS. State requlations require it to have a "Time Based Induction Machine" in the detection engine. What type of IDS is Baxter going to use?

Cisco devices use a protocol called CDP (Cisco Discovery Protocol) that allows routers to share information about each other. These messages can sometimes be sniffed. What is the destination MAC address for a CDP message?

When logging into an IRC server, what two commands must be passed by the IRC client?