Automating Offensive Workflows GASAE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A penetration testing team is automating exploitation of a web application. They have a custom exploit script that requires a valid session token, and they also use Burp Suite to intercept and modify requests. They want to run the exploit automatically against a staging environment every time a new build is deployed. What is the most effective way to integrate these components?

   • AUse a CI/CD pipeline to trigger a Python script that logs in to the application, obtains a session token, and then runs the exploit script, with Burp Suite configured as a proxy for logging.
   • BWrite a bash script that runs the exploit script and then separately runs Burp Suite's scanner to check for vulnerabilities.
   • CManually run the exploit script in Burp Suite's Repeater tool after each deployment to ensure the token is fresh.
   • DSchedule a cron job that runs the exploit script with a hard-coded session token obtained from a previous login.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A red team is automating exploitation of a third-party application hosted in a cloud environment. The team has a signed authorization that allows testing only during specific hours and only against a specific set of IP addresses. The automation must not run outside these hours or against other IPs. The team also needs to ensure that if an exploit causes the application to crash, the automation restarts it automatically. Which design is most appropriate?

   • AUse a script that runs continuously but only exploits the allowed IPs, and relies on the cloud provider's auto-restart feature.
   • BUse a manual process where an operator starts the workflow at the allowed time and monitors for crashes.
   • CUse a cron job that runs the workflow at the allowed time, but does not include any IP checks.
   • DUse an orchestration platform that schedules the workflow within the allowed hours, includes an IP allowlist check before each action, and has a health-check task that restarts the application if it becomes unresponsive.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   When integrating disparate offensive security tools into a cohesive pipeline, which of the following is essential to ensure data flows correctly between tools?

   • ARunning all tools on the same physical machine
   • BUsing a common data format or schema for outputs and inputs
   • CEnsuring all tools are written in the same programming language
   • DUsing only commercial tools
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A red team wants to automate the execution of multiple offensive tools (e.g., Nmap, Metasploit, and a custom script) in a specific order, with the ability to rerun only failed steps. They also need to maintain a history of runs for compliance. Which tool is best suited?

   • AA workflow orchestration platform that supports DAGs, retries, and run history.
   • BA continuous integration server that runs the tools as build steps.
   • CA simple shell script that runs the tools sequentially and logs output to a file.
   • DA manual runbook that operators follow and document.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security engineer is integrating a network scanner (Nmap), a web application scanner (Nikto), and a vulnerability scanner (OpenVAS) into a single automated pipeline. The tools output in different formats (XML, HTML, and CSV). The pipeline must feed a unified dashboard. What is the most effective way to handle the data integration?

   • AUse a shell script to concatenate all output files into one text file and display it on the dashboard.
   • BManually copy the relevant findings from each report into a spreadsheet each week.
   • CWrite a Python script that parses each tool's output and converts it into a common JSON schema, then stores it in a central database.
   • DConfigure each tool to output the same format by changing their configuration files.
   Reveal Solution Discussion Select an answer first