GXPN Exam Training Practice Tests (GIAC Exploit Researcher and Advanced Penetration Tester)]

Question 1

Which techniques are crucial when writing exploits for stack overflow vulnerabilities?
(Choose Two)
Response:

A. Identifying the correct offset to the return address B. Using polymorphic shellcode C. Employing format string vulnerabilities D. Encrypting the stack data

Correct Answer: A,B

Question 2

What does the term SEH (Structured Exception Handling) refer to in the context of Windows exploitation?
Response:

A. A technique for brute-forcing user credentials B. A feature to manage exceptions that can be leveraged in exploitation C. A method for handling memory leaks D. A system to ensure memory protection on Windows

Correct Answer: B

Question 3

What is one of the key limitations of fuzzing?
Response:

A. It does not cover all possible input scenarios B. It requires detailed source code knowledge C. It is only effective against open-source software D. It can only test small applications

Correct Answer: A

Question 4

Which of the following is a technique used to find the correct offset to the return address in a stack buffer overflow?
Response:

A. Analyzing core dumps B. Decrypting application binaries C. Fuzzing the application D. Scanning the binary with antivirus

Correct Answer: C

Question 5

Which of the following are ways to interact with or exploit client environments using tools like PowerShell?
(Choose Two)
Response:

A. Script-based automation of administrative tasks B. Modifying the Windows registry C. Kernel-level exploitation D. Sending spear-phishing emails

Correct Answer: A,B

Question 6

You are developing an exploit for a stack-based buffer overflow vulnerability in a Linux application. How would you calculate the offset to control the return address?
Response:

A. Use a fuzzing tool to inject large payloads B. Brute-force the return address until the correct value is found C. Generate a unique pattern with a tool like Metasploit's pattern_create.rb and determine the offset using pattern_offset.rb D. Perform a dictionary attack on the application

Correct Answer: C

Question 7

What is a critical consideration when identifying ways to improve a fuzzer?
Response:

A. Ensuring compatibility with older software versions B. Minimizing the cost of test environment setup C. Scaling the fuzzer to support distributed testing D. Integrating automated source code analysis tools

Correct Answer: C

Question 8

You are developing an exploit for a Windows application vulnerable to buffer overflows. To bypass DEP, which method would you use to execute your shellcode?
Response:

A. Modify the Windows kernel to disable DEP B. Use brute-force techniques to disable DEP C. Inject the shellcode directly into the stack D. Use Return-Oriented Programming (ROP) to bypass DEP

Correct Answer: D

GIAC Exploit Researcher and Advanced Penetration Tester - GXPN Exam Practice Test