You are testing a web application for SQL injection vulnerabilities. You want to use Metasploit to automate the detection of SQL injection flaws. Which auxiliary module should you use?

auxiliary/scanner/http/http_put

auxiliary/scanner/http/sql_injection

auxiliary/scanner/http/http_login

auxiliary/scanner/http/http_version

What is the primary purpose of using an encoder in Metasploit?

To encrypt the payload for secure transmission.

To compress the payload to reduce its size.

To obfuscate the payload to evade signature-based detection.

To increase the payload's reliability by adding error correction.

EC-CouncilCertified Penetration Testing Professional

Domain 6Objective 3

Mastering the Metasploit Framework CPENT Practice Questions (Page 8)

Part of the Advanced Exploitation and IoT domain, which makes up ~17% of our current practice bank.

44questions here

9free pages

12concepts

Questions 36–40

36application · easy
You have a Meterpreter session on a Windows host and need to capture keystrokes from the user currently logged in. Which command should you use?
Select an answer first
37application · easy
You are testing a web application for SQL injection vulnerabilities. You want to use Metasploit to automate the detection of SQL injection flaws. Which auxiliary module should you use?
Select an answer first
38foundation · easy
What is the primary purpose of using an encoder in Metasploit?
Select an answer first
39foundation · easy
Which tool is used with Metasploit to route traffic through a proxy chain to anonymize the source of attacks?
Select an answer first
40foundation · easy
Which Meterpreter command is used to display the current user's privileges and user ID on the compromised system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CPENT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CPENT” is a trademark of its owner, used for identification only.

Mastering the Metasploit Framework CPENT Practice Questions (Page 8)

Questions 36–40

You have a Meterpreter session on a Windows host and need to capture keystrokes from the user currently logged in. Which command should you use?

You are testing a web application for SQL injection vulnerabilities. You want to use Metasploit to automate the detection of SQL injection flaws. Which auxiliary module should you use?

What is the primary purpose of using an encoder in Metasploit?

Which tool is used with Metasploit to route traffic through a proxy chain to anonymize the source of attacks?

Which Meterpreter command is used to display the current user's privileges and user ID on the compromised system?

Keep studying — Advanced Exploitation and IoT