nerdexam
GIAC

GCIH · Question #207

You want to connect to your friend's computer and run a Trojan on it. Which of the following tools will you use to accomplish the task?

The correct answer is A. PSExec. PSExec is a Sysinternals utility that enables remote execution of processes on Windows systems over SMB, making it the standard tool for running programs on a remote machine.

Web Application Attacks & Post-Exploitation

Question

You want to connect to your friend's computer and run a Trojan on it. Which of the following tools will you use to accomplish the task?

Options

  • APSExec
  • BRemoxec
  • CHk.exe
  • DGetAdmin.exe

How the community answered

(33 responses)
  • A
    91% (30)
  • B
    6% (2)
  • D
    3% (1)

Why each option

PSExec is a Sysinternals utility that enables remote execution of processes on Windows systems over SMB, making it the standard tool for running programs on a remote machine.

APSExecCorrect

PSExec is a lightweight command-line tool from Microsoft Sysinternals that allows administrators - and attackers - to execute processes on remote Windows computers without pre-installing client software. It communicates over SMB (port 445) using valid credentials and can launch any executable, including malicious payloads such as Trojans, on the target host.

BRemoxec

Remoxec is not a widely recognized or documented remote execution utility within standard penetration testing or Windows administration toolsets.

CHk.exe

Hk.exe is a local privilege escalation exploit targeting specific Windows kernel vulnerabilities on the same machine, not a tool for remotely executing processes on another computer.

DGetAdmin.exe

GetAdmin.exe is a local privilege escalation tool used to add a user to the local Administrators group on the current machine, not a remote execution utility.

Concept tested: Remote process execution using PSExec over SMB

Source: https://learn.microsoft.com/en-us/sysinternals/downloads/psexec

Topics

#PSExec#remote execution#lateral movement#Trojan deployment

Community Discussion

No community discussion yet for this question.

Full GCIH Practice