nerdexam
GIAC

GPEN · Question #313

You want to connect to your friend's computer and run a Trojan on it. Which of the following tools will you use to accomplish the task?

The correct answer is A. PSExec. PSExec is a Sysinternals remote execution utility that allows running processes on a remote system without installing client software, making it a common tool for deploying payloads like Trojans to a target machine.

Exploitation & Post-Exploitation Techniques

Question

You want to connect to your friend's computer and run a Trojan on it. Which of the following tools will you use to accomplish the task?

Options

  • APSExec
  • BHk.exe
  • CRemoxec
  • DGetAdmin.exe

How the community answered

(30 responses)
  • A
    80% (24)
  • B
    3% (1)
  • C
    7% (2)
  • D
    10% (3)

Why each option

PSExec is a Sysinternals remote execution utility that allows running processes on a remote system without installing client software, making it a common tool for deploying payloads like Trojans to a target machine.

APSExecCorrect

PSExec, part of the Microsoft Sysinternals suite, establishes an authenticated remote session and executes any specified program on the target computer over SMB. Attackers abuse it in post-exploitation scenarios because it requires no pre-installed agent and can run arbitrary executables - including Trojans - with the privileges of the authenticated user. It is one of the most commonly abused legitimate tools in lateral movement and remote malware deployment.

BHk.exe

Hk.exe is a local Windows privilege escalation exploit tool, not a remote execution utility, so it cannot deploy software to another computer.

CRemoxec

Remoxec is not a widely recognized or documented remote execution utility relevant to this attack scenario.

DGetAdmin.exe

GetAdmin.exe is a local privilege escalation tool that grants administrator rights on the local machine, not a tool for executing code remotely on another system.

Concept tested: PSExec for remote process execution and Trojan deployment

Source: https://learn.microsoft.com/en-us/sysinternals/downloads/psexec

Topics

#PSExec#remote code execution#lateral movement#Trojan deployment

Community Discussion

No community discussion yet for this question.

Full GPEN Practice