Which Meterpreter command shows the complete process list for the target machine?

Study for the SANS560 GIAC Penetration Tester (GPEN) Test. Study with flashcards and multiple choice questions, each question has hints and explanations. Get ready for your exam!

Multiple Choice

Which Meterpreter command shows the complete process list for the target machine?

Explanation:
Listing the running processes on the target with Meterpreter is done using the ps command. This command queries the target and returns a complete view of all active processes, including details like process ID and process name (and often user/session context). Having the full process list is essential for understanding what’s running on the machine, deciding which process to attach to or migrate to, and spotting suspicious or high‑value targets for further actions. Other options do different things: Getuid shows who you are authenticated as on the target, not what’s running; Hashdump retrieves password hashes from the target system when you have the right privileges; Screenshot captures the current desktop image. None of these provide a full process list.

Listing the running processes on the target with Meterpreter is done using the ps command. This command queries the target and returns a complete view of all active processes, including details like process ID and process name (and often user/session context). Having the full process list is essential for understanding what’s running on the machine, deciding which process to attach to or migrate to, and spotting suspicious or high‑value targets for further actions.

Other options do different things: Getuid shows who you are authenticated as on the target, not what’s running; Hashdump retrieves password hashes from the target system when you have the right privileges; Screenshot captures the current desktop image. None of these provide a full process list.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy