Pentest Scripting Quiz: Can You Automate The Attack?

1. In automation frameworks, what is a 'handler' in the context of reverse shells?

A firewall rule that blocks traffic

A listener that catches incoming reverse shell connections

A script that encrypts payloads

A tool for scanning open ports

2. Which framework is commonly used to automate custom exploit development in penetration testing?

Nmap

Exploit Development Kit (EDK)

Metasploit Framework

Wireshark

3. What is the primary security concern with storing credentials in automation scripts?

Reduced script execution speed

Exposure of sensitive credentials if scripts are compromised

Incompatibility with modern systems

Inability to automate tasks

4. In web application automation testing, what is the purpose of session management in scripts?

To prevent cross-site scripting attacks

To maintain authentication across multiple requests

To encrypt sensitive data

To identify SQL injection vulnerabilities

5. Which of the following best describes 'living off the land' binaries (LOLBins) in attack automation?

Using legitimate system tools to perform attacks

Creating custom malware for each target

Relying on external exploit frameworks

Using only open-source penetration tools

6. In Python scripting, what does the 'subprocess' module allow penetration testers to do?

Execute system commands and capture output

Create encrypted network tunnels

Scan for open ports

Generate SSL certificates

7. What is the primary function of a 'stager' payload in Metasploit?

To directly execute the main payload

To download and execute the larger main payload

To scan for vulnerabilities

To encrypt communications

8. Which tool is commonly used to automate DNS enumeration and subdomain discovery?

Wireshark

Sublist3r or DNSenum

Burp Suite

Hydra

9. In scripting for penetration testing, what does URL encoding accomplish?

Compresses data for transmission

Converts special characters to bypass input filters

Encrypts sensitive information

Validates user input

10. What is the primary benefit of using Ansible for penetration testing automation?

It provides vulnerability scanning

It agentless automation across multiple targets

It encrypts all network traffic

It identifies zero-day exploits

11. Which scripting language is most commonly used for quick exploitation tasks and post-exploitation in penetration testing?

Python

Java

C#

Go

12. Which Python library is used for SSH automation and remote command execution during penetration testing?

Paramiko

Requests

Nmap

Impacket

13. What does the term 'shellcode' refer to in penetration testing automation?

A shell script used for system administration

Machine code that spawns a shell on the target

Encrypted communication protocol

Firewall bypass technique

14. In Metasploit, what is a payload?

A scanning module to identify vulnerabilities

Code executed on the target after exploitation

An encryption algorithm

A network protocol analyzer

15. Which of the following is a key security risk when automating attacks without proper controls?

Increased accuracy of scans

Unintended damage to production systems

Better attack documentation

Improved response time

16. What is the primary purpose of using Scapy in penetration testing automation?

Web scraping and data extraction

Packet manipulation and network scanning

Database exploitation

Credential harvesting

17. In PowerShell scripting for Windows penetration testing, what does -ExecutionPolicy control?

User account permissions

Script execution restrictions

Firewall rules

Registry access levels

18. Which Python library is commonly used to automate HTTP requests during web application penetration testing?

Requests

Paramiko

Scapy

BeautifulSoup

19. What is the primary advantage of using automation frameworks like Metasploit for penetration testing?

Reduced need for network connectivity

Centralized exploit repository and payload generation

Elimination of all false positives

Automatic target identification

20. In Bash scripting for penetration testing, what does the $? variable represent?

Current working directory

Exit status of the last command

Process ID of the current shell

Number of command-line arguments

Pentest Scripting Quiz: Can You Automate the Attack?