Tools
This network scanner is commonly used to enumerate hosts, find open ports, and find software versions.
What is nmap?
This 32-bit numbering system, written in dot-decimal in octets, is the main addressing scheme for networks.
What is IPv4?
This command shows you all files in a directory.
What is ls?
You receive an email from your bank, but it doesn't look right.
You look further, and the link to login isn't exactly the same URL you remember it being.
What is phishing?
This three-letter acronym (TLA) describes the trio of security goals.
What is the CIA triad?
This tool is the primary tool used in Password Cracking.
What is Hashcat?
This connector is used to terminate a copper Ethernet cable.
What is an RJ45?
This command searches for specific phrases in a file, string, or other input.
What is grep?
An attacker registers a domain one letter away from a real domain, waiting for users to mistype URLs.
What is typo squatting?
This bit can be added to a file to run as a specific user, usually root.
What is the SUID bit?
Has a Repeater, Proxy, and Intruder.
What is Burp Suite?
There are two standards on how to terminate an Ethernet cable. Name one of them.
What is T-568A/B?
This command will do DNS lookups, optionally through a specific DNS server using @.
What is dig?
An attacker is siphoning data between you and a coffee shop router, taking a copy of your network traffic to look at later.
What is a Man In The Middle (MITM)?
This random data gets added to a password before hashing to identical passwords from making the same ciphertext, and to increase complexity.
What is a salt?
This tool is a network capture analyzer that lets you inspect traffic down to the bits.
What is Wireshark?
Please do not throw sausage pizza away.
Also, people don't need these stupid protocols anyway.
What is the OSI Model?
I need to check on a systemd service and see if it is running and/or enabled on boot.
What is systemctl status?
A comment box on a forum has no sanitized inputs. A user injects a <script> tag, and now users are complaining they cannot post anymore. What attack has happened?
What is XSS (Cross-Site Scripting)?
eMudhra recently had their CA private keys leak. The most known one is 4. Give me another one of the 8.
What is 56, 66, 115, 155, 156, 230, or 237?
This tool suite is used to de-authenticate, capture handshakes, and ultimately crack Wi-Fi network passwords.
What is aircrack-ng?
This 802.11 specification is commonly referred to as Wi-Fi 5.
What is 802.11ac?
I need to find out what programs I can run with sudo. What argument can I add to sudo?
What is -l?
You check webserver logs, and you see a lot of POST requests with odd structure. Operators, asterisks, key phrases. What attack is being ran?
What is SQL Injection?
This ransomware from 2017 used the leaked EternalBlue exploit, attacked over 300,000 computers, and caused upwards of $4million in damage.
What is WannaCry?