A penetration tester downloaded a Java application file from a compromised web server and identifies how to invoke it by looking at the following log:
Which of the following is the order of steps the penetration tester needs to follow to validate whether the Java application uses encryption over sockets?

Question

A penetration tester downloaded a Java application file from a compromised web server and identifies how to invoke it by looking at the following log:

Which of the following is the order of steps the penetration tester needs to follow to validate whether the Java application uses encryption over sockets?

Emmanuel Aminu · Accepted Answer

Start a packet capture with Wireshark and then run the application.

Emmanuel Aminu · Answer

Run an application vulnerability scan and then identify the TCP ports used by the application.

Emmanuel Aminu · Answer

Run the application attached to a debugger and then review the application's log.

Emmanuel Aminu · Answer

Disassemble the binary code and then identify the break points.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 199 - PT0-002 discussion

Suggested answer: D

0 comments