Certified Ethical Hacker (CEH) Practice Question

During a Wi-Fi penetration test you find an employee's Android handset listening on TCP port 5555 and the banner identifies the service as Android Debug Bridge (ADB). You want the fastest way to get an interactive shell without touching the device physically. Which course of action and prerequisite would most likely let you succeed?

  • Push a malicious over-the-air (OTA) update through the recovery interface, providing the handset's bootloader is already unlocked.

  • Send a Stagefright-based MMS payload, provided the messaging application has not been patched against the vulnerability.

  • Initiate an ADB network session with "adb connect :5555" and drop to an ADB shell, assuming the phone is running Android 4.1 or earlier where ADB over TCP is unauthenticated.

  • Perform a Bluetooth OBEX file-transfer exploit, as long as the device is currently in discoverable pairing mode.

Certified Ethical Hacker (CEH)
Mobile Platform, IoT, and OT Hacking
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot