ECCouncil 312-50v13 Value Pack (Frequently Bought Together)

A penetration tester identifies that a web application's login form is not using secure password hashing mechanisms, allowing attackers to steal passwords if the database is compromised.
What is the best approach to exploit this vulnerability?

• A. Conduct a brute-force attack on the login form to guess weak passwords
• B. Perform a dictionary attack using a list of commonly used passwords against the stolen hash values
• C. Input a SQL query to check for SQL injection vulnerabilities in the login form
• D. Capture the login request using a proxy tool and attempt to decrypt the passwords

Explanation: Only visible for TorrentValid members. You can sign-up / login (it's free).

During a penetration test on a legacy Windows network, you use the nbtstat -A <IP> command on a target system and retrieve several NetBIOS names, including entries ending with <20> and
<03>. However, attempts to list shared folders fail. Which of the following best explains this behavior?

• A. The nbtstat utility cannot enumerate shares from NetBIOS names.
• B. The target system's NetBIOS service is bound to a non-standard port.
• C. The host is not part of any Active Directory domain.
• D. File and printer sharing is disabled on the target system.

Explanation: Only visible for TorrentValid members. You can sign-up / login (it's free).

Calvin, a grey-hat hacker, targets a web application that has design flaws in its authentication mechanism. He enumerates usernames from the login form of the web application, which requests users to feed data and specifies the incorrect field in case of invalid credentials. Later, Calvin uses this information to perform social engineering. Which of the following design flaws in the authentication mechanism is exploited by Calvin?

• A. Insecure transmission of credentials
• B. User impersonation
• C. Password reset mechanism
• D. Verbose failure messages

FILL BLANK
Scenario
Instructions
You have been hired as a part of the Red Team at CEHORG, an IT and ITES organization that deals with advanced research and development in the field of information security. It has offices all over the country connected in real-time by its network infrastructure.
Your organization is worried about rising cybersecurity incidents and has entrusted you with a comprehensive security audit of the complete infrastructure.
CEHORG's internal network consists of several subnets housing various organizational units like any large organization. The front office is connected to a separate subnet that connects to the company's public-facing computers. The company has installed multiple kiosks to help customers understand their products and services. The front office also has Wi-Fi connectivity to cater to the users who carry their smartphones and laptops.
The CEHORG's internal network is made up of Militarized and Demilitarized zones. As a security precaution and by design, all the internal resource zones are configured with different subnet IPs.
The militarized zone houses the application servers that provide application frameworks for various departments. The Demilitarized Zone contains public-facing systems of the organization, such as web and mail servers. The headquarters' network topology and protocols are replicated worldwide in all its satellite offices for efficient communication with the headquarters.
Description
CEH Practical exam presents you with 20 challenges built on the ethical hacking domains covered in the C|EH program. The exam hosts multiple hidden machines, each containing a set of vulnerable applications and services. You must apply your knowledge and skills in various ethical hacking domains and solve the challenges. The exam duration is 6 hours. Each challenge in CEH Practical weighs 10 points, and you are required to solve a minimum of 14 challenges out of 20, which would sum up to 140 points, to become a CEH (Practical) Credential Holder.
On the cyber range, you will have access to Ethical Hacker Workstations, EH Workstation - 1 and EH Workstation - 2. EH Workstation - 1 is a Parrot Security machine and EH Workstation
- 2 is a Windows 11 machine. You can switch to these machines from the Resources tab.
Please note that there are a maximum of 3 attempts for each challenge.
Available target networks:
10.10.55.0/24
192.168.44.0/24
192.168.200.0/24
Exclusions:
10.10.55.1, 10.10.55.2
192.168.44.1, 192.168.44.2
192.168.200.1, 192.168.200.2
The credentials to access EH Workstation - 1 (Parrot Security) machine are as below:
Username: attacker Password: toor
The credentials to access EH Workstation - 2 (Windows 11) are as below:
Username: Admin Password: Pa$$w0rd
The credentials to access OpenVAS on EH Workstation - 1 (Parrot Security) machine are as below:
Username: admin Password: password
To open OpenVAS tool, click Applications at the top of the Desktop window and navigate to Pentesting → Vulnerability Analysis → Openvas - Greenbone → Start Greenbone Vulnerability Manager Service to launch OpenVAS tool.
Note: You can use username.txt and password.txt available on the Desktop of the EH Workstation - 1 (Parrot Security) machine for any credentials/password cracking attempt.
Flags
Challenge:
Explore the web application at www.cehorg.com and enter the flag's value on the page with page_id=103. (Format: N*aA*a)

1'mM@d

You're the security manager for a tech company that uses a database to store sensitive customer data. You have implemented countermeasures against SQL injection attacks. Recently, you noticed some suspicious activities and suspect an attacker is using SQL injection techniques. The attacker is believed to use different forms of payloads in his SQL queries. In the case of a successful SQL injection attack, which of the following payloads would have the most significant impact?

• A. ' OR 'a'='a; DROP TABLE members; --: This payload combines the manipulation of the WHERE clause with a destructive action, causing data loss
• B. ' OR username LIKE '%': This payload uses the LIKE operator to search for a specific pattern in a column
• C. UNION SELECT NULL, NULL, NULL -- : This payload manipulates the UNION SQL operator, enabling the attacker to retrieve data from different database tables
• D. ' OR '1'='l: This payload manipulates the WHERE clause of an SQL statement, allowing the attacker to view unauthorized data