LabYard_

Pentesting Tools

Answer all 15 questions, then submit. You need 75% to pass. If you don't pass, the reattempt unlocks after 24 hours.

Q1. dirb and feroxbuster are used to:

discover web content (directories/files), often recursively spoof ARP sniff traffic crack WPA

Q2. Burp Intruder is used to:

map the site tree proxy traffic compare two responses automate customized payloads into request positions (fuzzing/brute-force)

Q3. `sqlmap --os-shell` attempts to:

obtain an interactive OS command shell on the database server bypass a WAF enumerate users dump password hashes

Q4. `nmap -Pn` tells Nmap to:

scan UDP ports spoof the source IP run every script skip host discovery and treat the host as up

Q5. kerbrute is used to:

dump databases enumerate/spray AD accounts via Kerberos pre-auth sniff packets crack WPA

Q6. Hydra is primarily used for:

packet capture online brute-forcing of login services offline hash cracking directory brute-forcing

Q7. msfvenom (Metasploit) is used to:

crack hashes scan networks generate payloads/shellcode in various formats fuzz web apps

Q8. `nmap -p-` scans:

the top 100 ports all 65535 TCP ports only already-open ports common UDP ports

Q9. `sqlmap -r request.txt` uses:

a raw HTTP request (e.g., saved from Burp) as the target a results file a wordlist a config profile

Q10. Like ffuf, wfuzz injects wordlist entries at:

the cookie only the --proxy value the FUZZ keyword in the request the -o output file

Q11. Netcat (nc) is best described as:

an AD enumeration tool a hash cracker a web scanner the TCP/IP 'swiss army knife' for arbitrary connections, listeners and shells

Q12. wafw00f is used to:

map DNS crack hashes detect and fingerprint which WAF protects a site bypass a WAF automatically

Q13. In Hashcat, `-a 0` selects which attack mode?

straight (dictionary) attack combinator rule-based only mask/brute-force

Q14. Aircrack-ng is used for:

cracking WEP/WPA keys from captured wireless handshakes directory brute-forcing AD enumeration SQL injection

Q15. theHarvester is an OSINT tool that gathers:

open ports emails, subdomains and hosts for a target domain session tokens password hashes

LabYard · hands-on security & data training · flags look like ctflab{...}