GIAC Exam GCCC Topic 5 Question 42 Discussion

Actual exam question for GIAC's GCCC exam

Question #: 42
Topic #: 5

If an attacker wanted to dump hashes or run wmic commands on a target machine, which of the following tools would he use?

AMimikatz

BOpenVAS

CMetasploit

Show Suggested Answer

Suggested Answer: C

by Gertude at Mar 10, 2024, 03:32 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

6 months ago

OpenVAS is more for vulnerability scanning, so it wouldn't be the tool to use for this scenario.

upvoted 0 times

...

6 months ago

I believe Metasploit is more for exploitation rather than dumping hashes.

upvoted 0 times

...

6 months ago

But what about Metasploit? That could also be used for the same purpose.

upvoted 0 times

...

7 months ago

I agree with Britt, Mimikatz is commonly used for that.

upvoted 0 times

...

7 months ago

I think the attacker would use Mimikatz to dump hashes.

upvoted 0 times

...