During a penetration testing engagement, you are tasked with establishing a persistent backdoor on a compromised Linux system. Which tool would be the BEST to use for creating a foothold and ensuring persistence while minimizing the chances of detection by host-based intrusion detection systems (HIDS)?
The correct answer is Empire, because it is a post-exploitation framework that allows for the creation of persistent backdoors. Empire specializes in evasion techniques and is known for its ability to maintain stealth, making it less likely to be detected by HIDS. Mimikatz, while a powerful utility for extracting credentials on Windows systems, does not by itself provide persistence mechanisms. Metasploit, can indeed be used to establish persistence, but it is more easily detected by HIDS than Empire when it comes to maintaining long-term persistence due to its common signatures. PsExec, is incorrect as it is typically used for remote command execution rather than establishing persistence and is well-known to HIDS.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are some common techniques used by Empire for evasion?
Open an interactive chat with Bash
How does Empire maintain persistence on a compromised Linux system?
Open an interactive chat with Bash
What's the difference between Empire and Metasploit in penetration testing?