Jump to content
info4436

Something off with the exam lab

Recommended Posts

info4436

Hi,

 

I am currently doing the eJPT exam and something seems off with the exam lab: 

- two hosts (.4 and .85) do not show ANY ports open

- there are several exam questions that point to a PHP web server, but no hosts show port 80 or 443 open

- my VPN works only about 1 in 10 times, the other times I get a "connection refused" message

 

My NMap command: 

nmap -T4 -sV -sC -p- 192.168.193.85

 

What could be wrong? Who can I contact?

Cheers,

 

BC

Share this post


Link to post
Share on other sites
imosh

Same here!

I have no idea what to do about it!

I was failed just because of that, And so regret that i was taken those course

Cant even contact anyone to solve this issue which is VPN problem, it disconnect every couple of minutes!

Im sure i would finish this course in few hours but VPN issues it makes me sick!

Share this post


Link to post
Share on other sites
info4436

Hi, 

actually, the exam was fine. Some hosts are just a bit misleading. The fact I thought there was something "off" was because of problems with my VPN and the fact that the supplied capture file shows a host not in the ping sweep. 

I got 90%, so it is certainly doable. Support did not get back to me though, but that just might take a while, not sure,

 

BC

Share this post


Link to post
Share on other sites
nitinpanwar1999
On 5/3/2021 at 8:20 AM, info4436 said:

Hi, 

actually, the exam was fine. Some hosts are just a bit misleading. The fact I thought there was something "off" was because of problems with my VPN and the fact that the supplied capture file shows a host not in the ping sweep. 

I got 90%, so it is certainly doable. Support did not get back to me though, but that just might take a while, not sure,

 

BC

ip address i got from wireshark has no port open and some ip has the same pronblem

what shoud i do please help

Share this post


Link to post
Share on other sites
adams.rosco

Hi The Exam is a standalone instance that gets spun up, so there isnt anything "off" with the exams. It just means there's other routes you should be focusing on. 

Share this post


Link to post
Share on other sites
smithnr12321

Its a little late, but revisit the networking section of the eJPT content. It will guide you to the next steps (based on forum chain it appears that a step is being skipped) , or look at some eJPT exam blog posts to see if comments from other peoples experience inspires a new exploitation pathway.

Remember, the eJPT isn't just a "penetration test". It is an exam on Information Security concepts through a penetration tester lense

Share this post


Link to post
Share on other sites
hopkinsbr97

hi there,

 

I am takig the exam now and have spent the shole day revisiting the ejpt content, it really doesnt help with routing. You get the pcap file as explained above, I have a little information about the .4 and .85 addresses that would make me want to add them to a routing table, however, i cant find anything to show what gateway should be used, as 0.0.0.0 doesnt appear to be the way

Share this post


Link to post
Share on other sites
smithnr12321

I'm not sure how much can be said without giving the answer, but think about how a router/switch works.

Take a step back. The answer is there but only if you know what you need to look for.

I believe in you! It stumped me for a while too (and my only networking exposure was the eJPT exam)

Share this post


Link to post
Share on other sites
Constructive_Destruction

Hi there. I've been taking the eJPT. On the first day I managed to get meterpreter on the pivot machine, .211, and pivot in to the second machine that has the motville web site. Since day two, I've been receiving an error when I go and try and get my meterpreter again. Consistently I get:

192.168.193.211:445 - Exploit failed: Rex::Proto::SMB::Exceptions::ErrorCode The server responded with error: STATUS_OBJECT_NAME_NOT_FOUND (Command=162 WordCount=0)


Is there anything per chance wrong with the server, on the other end? This exact same attack route worked consistently previously. 

 

   Thanks!     Barnaby

Share this post


Link to post
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now

×