nerdexam
GIAC

GPEN · Question #242

You want to connect to your friend's computer and run a Trojan on it. Which of the following tools will you use to accomplish the task?

The correct answer is C. PSExec. PSExec is a legitimate Sysinternals remote execution utility that is widely abused by attackers to run executables, including malware, on remote systems without installing a client.

Exploitation & Post-Exploitation Techniques

Question

You want to connect to your friend's computer and run a Trojan on it. Which of the following tools will you use to accomplish the task?

Options

  • ARemoxec
  • BHk.exe
  • CPSExec
  • DGetAdmin.exe

How the community answered

(24 responses)
  • A
    13% (3)
  • B
    4% (1)
  • C
    79% (19)
  • D
    4% (1)

Why each option

PSExec is a legitimate Sysinternals remote execution utility that is widely abused by attackers to run executables, including malware, on remote systems without installing a client.

ARemoxec

Remoxec is not a recognized standard remote execution tool in common security toolkits or certification curricula.

BHk.exe

Hk.exe is a local privilege escalation exploit tool targeting Windows, not a remote code execution utility.

CPSExecCorrect

PSExec (PsExec.exe) from Microsoft Sysinternals communicates over SMB (port 445) and uses the Windows Service Control Manager to remotely create and start a service that executes a specified binary on the target host. This makes it a primary tool for lateral movement and remote Trojan deployment in penetration testing and real-world attacks. It requires valid credentials or an active authenticated session on the target.

DGetAdmin.exe

GetAdmin.exe is a legacy Windows local privilege escalation tool that elevates local rights, not a remote execution or lateral movement tool.

Concept tested: Remote code execution using PSExec for lateral movement

Source: https://learn.microsoft.com/en-us/sysinternals/downloads/psexec

Topics

#PSExec#remote execution#lateral movement#post-exploitation tools

Community Discussion

No community discussion yet for this question.

Full GPEN Practice