Certified Ethical Hacker CEH · Free Practice Question Medium
Question 59
Which technique is used with the ProxyChains command to allow a penetration tester to pivot to a new subnet?
- A Port forwarding
- B VPN pivoting
- C SSH pivoting
- D Modifying routing tables
Reveal correct answer
Correct answer: D
Explanation
OBJ-5.2: ProxyChains is a tool that allows a penetration tester to pivot to a new subnet, but it must be combined with the modification of the penetration tester's routing tables on their machine. For example, assume that the exploited client machine is located in the 192.168.5.0/24 subnet, but you need to access a server in the 10.0.0.0/24 subnet. You would then need to "route add 10.0.0.0 255.255.255.0 1" (1 is the ID of your Meterpreter session). Then, you can run "proxychains <command>" to target the new subnet. For example, "proxychains nmap -sT -Pn -p21,23,25,80,443 10.0.0.5" would perform an nmap scan of the targeted server in the new subnet by chaining the connections together using a proxy on the localhost.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
