1. They come with python project, asked to identify bugs in python code 2. They run the code and asked to how you enumerate application manually without using 3. nmap, dirbuster nor any automation tool. 4. Explain about Json interoperatable attack 5. Explain about Dependency confusion attack 6. Explain about printspool attack 7. Explain how can get RFI with only having LFI vulnerability in php application 8. Explain about deserialization attack 9. Explain what checks you perform on windows machine to exploit privilege escalation attack 10. How you will perform pivoting attacks