In this technique, the attacker places an attack toolkit on a central source and a copy of the attack toolkit is transferred to a newly discovered vulnerable system. Once the attacker finds a vulnerable machine, they instruct the central source to transfer a copy of the attack toolkit to the newly compromised machine, on which attack tools are automatically installed under management by a scripting mechanism.

In this technique, the attacker places an attack toolkit on a central source and a copy of the attack toolkit is transferred to a newly discovered vulnerable system. Once the attacker finds a vulnerable machine, they instruct the central source to transfer a copy of the attack toolkit to the newly compromised machine, on which attack tools are automatically installed under management by a scripting mechanism.

• A. Back-chaining Propagation
• B. Autonomous Propagation
• C. Local Subnet Scanning
• D. Central Source Propagation

Answer: (D)

Central source propagation describes using a single command-and-control hub to push a toolkit to newly found vulnerable hosts, with automation handling the installation on the target under scripting control. The attacker stores the attack toolkit on a central source and, once a vulnerable machine is identified, directs that hub to transfer a copy to the new host, where the tools are installed and managed automatically. This approach lets the attacker scale quickly, keep a consistent toolset across compromised machines, and minimize manual steps through scripting. The other options don’t fit this workflow. Back-chaining propagation implies chaining actions from the victim back to the attacker rather than a central hub distributing payloads. Autonomous propagation would mean the infected host propagates on its own without centralized direction. Local subnet scanning refers to discovery, not deployment or automated installation. Central source propagation specifically captures the described centralized, scripted deployment model.

Central source propagation describes using a single command-and-control hub to push a toolkit to newly found vulnerable hosts, with automation handling the installation on the target under scripting control. The attacker stores the attack toolkit on a central source and, once a vulnerable machine is identified, directs that hub to transfer a copy to the new host, where the tools are installed and managed automatically. This approach lets the attacker scale quickly, keep a consistent toolset across compromised machines, and minimize manual steps through scripting.

The other options don’t fit this workflow. Back-chaining propagation implies chaining actions from the victim back to the attacker rather than a central hub distributing payloads. Autonomous propagation would mean the infected host propagates on its own without centralized direction. Local subnet scanning refers to discovery, not deployment or automated installation. Central source propagation specifically captures the described centralized, scripted deployment model.