Metasploit Payload TFTP Question. (Need Help)

bkhayes

hello there - i'm doing some GCIH test prep. and i got this sample question. can somebody help?

What purpose would an attacker have for including TFTP commands in the payload of a buffer overflow exploit?________________________________________

-To launch a port scan against the victim's internal network
-To run a brute force attack against the victim's administrator password
-To retrieve a malicious executable from the attacker's system
-To disable the victim's anti-virus and security software

i think the purpose is to To retrieve a malicious executable from the attacker's system beacause TFTP is about transfering files to and from a remote machine. but i could be wrong. anybody got a clue?

the_Grinch

You're right, retrieve a malicious executable.