Câu 303: 312-50V13: Certified Ethical Hacker v13

During a red team exercise, a certified ethical hacker (CEH) is working on exploiting a potential vulnerability in the target’s web server. The CEH has completed the information gathering and footprinting stages and mirrored the website for offline analysis. They have also discovered the server is prone to session hijacking. Which next step is most likely to be part of a successful attack methodology, keeping in mind the requirement to minimize the possibility of detection?

1. A. Perform vulnerability scanning with automated tools to find additional weaknesses.
2. B. Hijack a session and immediately modify server configuration files. — đáp án hiện tại
3. C. Attempt SQL Injection to extract database information.
4. D. Directly apply brute force attack to crack the server’s password.