A penetration tester is performing a code review. Which of the following testing techniques is being performed?

A penetration tester is designing a phishing campaign and wants to build list of users (or the target organization. Which of the following techniques would be the MOST appropriate?
(Select TWO)

Which of the following CPU registers does the penetration tester need to overwrite in order to exploit a simple buffer overflow?

A penetration tester has compromised a host. Which of the following would be the correct syntax to create a Netcat listener on the device?

A penetration tester executed a vulnerability scan against a publicly accessible host and found a web server that is vulnerable to the DROWN attack. Assuming this web server is using the IP address 127.212.31.17, which of the following should the tester use to verify a false positive?