Flashcards
OSCP
Cards in this deck (13)
- 1what is phpinfo.phpA file with important information about the php server, the output of phpinfo()
- 2what two directives in the phpinfo.php allow for LFIallow_url_fopen
allow_url_include - 3How would you change this to a POST requestCHange the HTTP verb to "POST"
- 4What is the DOCUMENT_ROOT variable in the context of phpinfo.phpThe document root directory under which the current script is executing, as defined in the server's configuration file.
- 5What SQL statement can be used to write data (such as a webshell) to a fileUNTION SELECT '[DATA]' INTO OUTFILE '[FILE]'
- 6What is the default value for DOCUMENT_ROOT/var/www/html/
- 7If you notice an "internally" open port what should you do?Port forward and scan with nmap
- 8Why might a process running from the /opt directory be interestingBecause /opt is intended to hold optional software that is not part of the default installation
- 9What is the nature and function of a PHP Session IDA PHP Session ID is a unique, randomly generated string used to identify a specific user's session on a website. Since HTTP is stateless, meaning each request is independent, PHP sessions provide a way to maintain user-specific data across multiple page requests.
- 10What is the nature and function of the authorized_keys fileThe authorized_keys file stores a list of public keys that are permitted to log in to that user's account on a remote server via SSH (Secure Shell).
It essentially acts as a list of "approved" public keys, allowing users with the corresponding private keys to access the server without needing a password - 11If an exploit requires a password and a machine is vulnerable to LFI what should you doSearch google for configuration files associated with program you want to exploit
- 12what is the difference between the built-in and local administrator accounts-built in accounts have higher priviliges and do not have to go through UAC when performing admin actions.
-local administrator cannot access a computer remotely with admin privileges using WinRM, SMB, or RPC.
-The local administrator must use RDP to open an administrative session on a host.
-Domain accounts with local admin can open an administrative login using RDP, WinRM, SMB, or RPC. However, this behavior can be disabled. - 13—
Information
- Description
- GRE OSCP Flashcards on OSCP, created by Brooks Johnson on 29/07/2025.
- Created by
- Brooks Johnson
- Views
- 0
- Rating