GIAC Exploit Researcher and Advanced Penetration Tester 認定 GXPN 試験問題:

1. What is the primary goal of a stack-based buffer overflow attack on a Windows system?
Response:

A) To disable Windows firewall rules
B) To escalate network privileges
C) To overwrite the return address and execute arbitrary code
D) To exhaust the system's memory resources

2. What tools are commonly used to automate the process of generating exploits for stack buffer overflows?
(Choose Two)
Response:

A) IDA Pro
B) Metasploit
C) Fuzzers
D) gdb

3. Which two techniques can help prevent stack smashing exploits?
(Choose Two)
Response:

A) Stack canaries
B) Using static memory allocation
C) Data Execution Prevention (DEP)
D) Avoiding memory dumps

4. Which of the following is a common technique used to bypass Address Space Layout Randomization (ASLR) on Windows?
Response:

A) Stack canaries
B) Return-oriented programming (ROP)
C) DLL hijacking
D) Heap spraying

5. What is a key challenge when writing exploits against stack-protected programs using ASLR (Address Space Layout Randomization)?
Response:

A) Disabling the NX bit
B) Preventing integer overflows
C) Bypassing brute-force protection
D) Locating the base address of the stack

質問と回答：