A penetration tester has established an on-path position between a target host and local network services but has not been able to establish an on-path position between the target host and the
Internet. Regardless, the tester would like to subtly redirect HTTP connections to a spoofed server IP.
Which of the following methods would BEST support the objective?

Question

A penetration tester has established an on-path position between a target host and local network services but has not been able to establish an on-path position between the target host and the

Internet. Regardless, the tester would like to subtly redirect HTTP connections to a spoofed server IP.

Which of the following methods would BEST support the objective?

Olusola Adebayo · Accepted Answer

Proxy HTTP connections from the target host to that of the spoofed host.

Olusola Adebayo · Answer

Gain access to the target host and implant malware specially crafted for this purpose.

Olusola Adebayo · Answer

Exploit the local DNS server and add/update the zone records with a spoofed A record.

Olusola Adebayo · Answer

Use the Scapy utility to overwrite name resolution fields in the DNS query response.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 155 - PT0-002 discussion

Suggested answer: D

0 comments