Exam PT0-002 topic 1 question 284 discussion

Clearly MariaDB is unauthorized

You have to specify the port, ergo, is 25 with the vulner scan

Why Option B is Correct? The scan indicates that MariaDB is running on port 3306, and it’s marked as "unauthorized," suggesting potential misconfigurations. The mysql-info.nse script gathers valuable information, such as: Database version. Service configuration. Known vulnerabilities (e.g., if the database version is outdated). The database often holds critical data and is a high-value target for penetration testers.

Targeting Port 25 to enumerate a potential list of users would be my choice. None of these commands would identify a vulnerable service, this has already been done by the initial nmap scan. Having a list of valid users would provide the best approach to further an attack.

A. nmap -v -p 25 –script smtp-enum-users remotehost: This command specifically targets the SMTP service running on port 25. The smtp-enum-users script is useful for enumerating valid usernames on the SMTP server, which can help identify potential accounts that could be exploited. -------------------------------------- B. nmap -v –script=mysql-info.nse remotehost: This command targets the MySQL service but only gathers general information about the MySQL server. While useful, it is not specifically designed to identify exploitable vulnerabilities. C. nmap –script=smb-brute.nse remotehost: This command targets SMB services, which are not listed in the scan results. Therefore, it would not be applicable to the services found in the scan. D. nmap -p 3306 –script “httpvuln” remotehost: This command attempts to run scripts related to HTTP vulnerabilities against the MySQL port (3306), which is not appropriate since 3306 is not an HTTP service.

needs to get into SQL. it is also running unauthorizes DB. also DB has more value than Mail server

to "discover an exploitable service" B. nmap -v --script=mysql-info.nse remotehost -v: Enables verbose mode. --script=mysql-info.nse: Executes the Nmap script "mysql-info.nse," which is designed to gather information about a MySQL server. This command is used to obtain information about the MySQL service running on the target host, including version details and configuration.

targeting the open SMTP port 25