Exam PT0-002 topic 1 question 112 discussion

Actual exam question from CompTIA's PT0-002

Question #: 112
Topic #: 1

A penetration tester is conducting a penetration test. The tester obtains a root-level shell on a Linux server and discovers the following data in a file named password.txt in the /home/svsacct directory:
U3VQZXIkM2NyZXQhCg==
Which of the following commands should the tester use NEXT to decode the contents of the file?

A. echo U3VQZXIkM2NyZXQhCg== | base64 ג€"d
B. tar zxvf password.txt
C. hydra ג€"l svsacct ג€"p U3VQZXIkM2NyZXQhCg== ssh://192.168.1.0/24
D. john --wordlist /usr/share/seclists/rockyou.txt password.txt

Show Suggested Answer

Suggested Answer: A 🗳️

by NotAHackerJustYet at Feb. 4, 2023, 11:28 p.m.

Comments

Submit Cancel

bieecop

11 months, 3 weeks ago

Selected Answer: A

echo U3VQZXIkM2NyZXQhCg== | base64 -d >> Sup3rM3cret!

upvoted 1 times

...

cy_analyst

1 year, 3 months ago

Selected Answer: A

"Super!3cret!"

upvoted 2 times

...

kloug

1 year, 5 months ago

aaaaaaaaaa

upvoted 2 times

...

NotAHackerJustYet

1 year, 5 months ago

Selected Answer: A

Answer: A. echo U3VQZXIkM2NyZXQhCg== | base64 ג€"d Option A is the correct answer. This command will decode the contents of the file using the base64 encoding format, which is commonly used to encode binary data into ASCII characters. The command will take the encoded data in the file, and return the decoded data. Option B is incorrect because the tar command is used to create and extract archives, not decode data. Option C is incorrect because the hydra command is used to conduct brute-force attacks against remote services, not decode data. Option D is incorrect because the john command is used to crack passwords, not decode data.

upvoted 3 times

...