Nick Academy: Book 2 Quiz

SNMP uses a password authentication mechanism called a ________________,

Which of the following tools is strictly used to scrub metadata?

An attacker wants to scan a machine for any open ports. However, they are worried about being detected so they opt to use a "half-open" scan which drops the 3rd leg of the TCP handshake. Which command would they use?

While Scapy can manipulate network traffic by sending packets, it can also receive packets. If I wanted to receive Layer 2 packets what command would I use?

According to SANS, all recent MSF exploits are written in which language?

This tool uses a "Get-Attack" command that can help you find a specific attack by using keywords.

_______ enables testers to enter OS shell commands through the web app input vectors.

Jared recently created a website where people vote on their favorite Truly flavor. While using the site from a client side proxy, Nick notices there are no session/token variables applied to his login. Nick, being an avid fan of Strawberry Lemonade decides he wants to manipulate the poll and send multiple votes for his fav flavor. Which Burp feature would Nick use?

Nick is in the process of making PizzaPals.com, a social media website for other home cooks. Unfortunately Nick was in a rush while creating the homepage and accidently left in a html comment that contains credentials to a /VIP directory that would hold sensitive information on the most elite home cooks. According to SANS, this is an example of ________.

Nick receives an unsuspecting call from an executive working at Peeps International. The executive tells Nick they want him to be the face of their new "Peeporini Pizza" flavor, all they need to get started with the process is Nick's SSN, DOB, and CCN. According to SANS, this is an example of ________.