GPEN · Question #242
You want to connect to your friend's computer and run a Trojan on it. Which of the following tools will you use to accomplish the task?
The correct answer is C. PSExec. PSExec is a legitimate Sysinternals remote execution utility that is widely abused by attackers to run executables, including malware, on remote systems without installing a client.
Question
You want to connect to your friend's computer and run a Trojan on it. Which of the following tools will you use to accomplish the task?
Options
- ARemoxec
- BHk.exe
- CPSExec
- DGetAdmin.exe
How the community answered
(24 responses)- A13% (3)
- B4% (1)
- C79% (19)
- D4% (1)
Why each option
PSExec is a legitimate Sysinternals remote execution utility that is widely abused by attackers to run executables, including malware, on remote systems without installing a client.
Remoxec is not a recognized standard remote execution tool in common security toolkits or certification curricula.
Hk.exe is a local privilege escalation exploit tool targeting Windows, not a remote code execution utility.
PSExec (PsExec.exe) from Microsoft Sysinternals communicates over SMB (port 445) and uses the Windows Service Control Manager to remotely create and start a service that executes a specified binary on the target host. This makes it a primary tool for lateral movement and remote Trojan deployment in penetration testing and real-world attacks. It requires valid credentials or an active authenticated session on the target.
GetAdmin.exe is a legacy Windows local privilege escalation tool that elevates local rights, not a remote execution or lateral movement tool.
Concept tested: Remote code execution using PSExec for lateral movement
Source: https://learn.microsoft.com/en-us/sysinternals/downloads/psexec
Topics
Community Discussion
No community discussion yet for this question.