GIAC Exploit Researcher and Advanced Penetration Tester

QUESTION NO: 1
How can an exploit writer overcome Address Space Layout Randomization (ASLR) while creating a stack smashing attack?
Response:

A. Implementing polymorphic code B. Using brute force to guess addresses C. By using hard-coded memory addresses D. Employing a heap spray technique

Correct Answer: D

QUESTION NO: 2
Which of the following mitigations is designed to prevent stack smashing attacks?
Response:

A. ASLR B. Stack canaries C. Buffer allocation D. Return-oriented programming

Correct Answer: B

QUESTION NO: 3
You are tasked with fuzzing a proprietary protocol to identify potential flaws. Which tool or framework would you use, and what would be your first step in the fuzzing process?
Response:

A. Use Nmap to scan for open ports before starting fuzzing B. Use Metasploit and begin by exploiting existing vulnerabilities C. Use the Sulley framework and start by defining a protocol grammar D. Use Wireshark and start by analyzing the protocol's traffic

Correct Answer: C

QUESTION NO: 4
Which of the following is a limitation of fuzzing techniques?
Response:

A. Fuzzing can only find known vulnerabilities B. Fuzzing cannot detect timing-based attacks C. Fuzzing is limited by the quality of input mutations D. Fuzzing is ineffective for large codebases

Correct Answer: C

QUESTION NO: 5
During a penetration test, you want to redirect network traffic through your machine without disrupting services. Which of the following methods would you use?
Response:

A. Perform a brute-force attack on the router's admin credentials B. Launch a buffer overflow attack on the network gateway C. Spoof a DNS server to reroute traffic D. Use ARP poisoning to perform a man-in-the-middle (MITM) attack

Correct Answer: D

QUESTION NO: 6
In client environment exploitation, what role does the exploitation of third-party applications play?
Response:

A. It is irrelevant in modern environments B. It is employed mainly for lateral movement C. It is typically used to gain initial access D. It is used primarily for data exfiltration

Correct Answer: C

QUESTION NO: 7
When writing shellcode for Windows, what functionality must be correctly implemented to ensure stability?
Response:

A. GUI interaction B. Cross-platform compatibility C. Network packet structure D. Correct API call preparation

Correct Answer: D

QUESTION NO: 8
In the context of network manipulation, what is the primary goal of privilege escalation attacks?
Response:

A. To encrypt network traffic B. To gain unauthorized access to system resources C. To disrupt network services D. To perform data validation

Correct Answer: B

QUESTION NO: 9
Which of the following is a key requirement when writing shellcode for Linux systems?
Response:

A. Using absolute addresses B. Avoiding null bytes C. Hardcoding file paths D. Including encrypted payloads

Correct Answer: B

GIAC Exploit Researcher and Advanced Penetration Tester - GXPN Exam Questions