Câu 31: PT0-003: CompTIA PenTest+

During an internal penetration test, a tester compromises a Windows OS-based endpoint and bypasses the defensive mechanism on that system. The tester also discovers the endpoint is part of an Active Directory local domain. The tester’s main goal is to leverage credentials to authenticate into other systems within the Active Directory environment. Which of the following steps should the tester take to complete the goal?

1. A. Use Mimikatz to collect information about the accounts and try to authenticate in other systems. — đáp án hiện tại
2. B. Use hasheat to crack a password for the local user on the compromised endpoint.
3. C. Use Evil-WinRM to access other systems in the network within the endpoint credentials.
4. D. Use Metasploit to create and execute a payload and try to upload the payload into other systems.