GCIH · Question #207
You want to connect to your friend's computer and run a Trojan on it. Which of the following tools will you use to accomplish the task?
The correct answer is A. PSExec. PSExec is a Sysinternals utility that enables remote execution of processes on Windows systems over SMB, making it the standard tool for running programs on a remote machine.
Question
You want to connect to your friend's computer and run a Trojan on it. Which of the following tools will you use to accomplish the task?
Options
- APSExec
- BRemoxec
- CHk.exe
- DGetAdmin.exe
How the community answered
(33 responses)- A91% (30)
- B6% (2)
- D3% (1)
Why each option
PSExec is a Sysinternals utility that enables remote execution of processes on Windows systems over SMB, making it the standard tool for running programs on a remote machine.
PSExec is a lightweight command-line tool from Microsoft Sysinternals that allows administrators - and attackers - to execute processes on remote Windows computers without pre-installing client software. It communicates over SMB (port 445) using valid credentials and can launch any executable, including malicious payloads such as Trojans, on the target host.
Remoxec is not a widely recognized or documented remote execution utility within standard penetration testing or Windows administration toolsets.
Hk.exe is a local privilege escalation exploit targeting specific Windows kernel vulnerabilities on the same machine, not a tool for remotely executing processes on another computer.
GetAdmin.exe is a local privilege escalation tool used to add a user to the local Administrators group on the current machine, not a remote execution utility.
Concept tested: Remote process execution using PSExec over SMB
Source: https://learn.microsoft.com/en-us/sysinternals/downloads/psexec
Topics
Community Discussion
No community discussion yet for this question.