GIAC Penetration Tester (GPEN) — Question 41

You have gained shell on a Windows host and want to find other machines to pivot to, but the rules of engagement state that you can only use tools that are already available. How could you find other machines on the target network?

Answer options

• A. Use the "ping" utility to automatically discover other hosts
• B. Use the "ping" utility in a for loop to sweep the network.
• C. Use the "edit" utility to read the target's HOSTS file.
• D. Use the "net share" utility to see who is connected to local shared drives.

Correct answer: B

Explanation

Option B is correct because using the 'ping' utility in a for loop allows for systematic scanning of the entire network range to identify active hosts. Option A is incorrect as it does not provide a method for discovering all hosts; simply relying on 'ping' without a loop is insufficient. Option C is wrong since the 'edit' utility does not help in discovering other devices, and Option D does not assist in finding other machines on the network but rather checks shared drive connections.