GPEN · Question #313
You want to connect to your friend's computer and run a Trojan on it. Which of the following tools will you use to accomplish the task?
The correct answer is A. PSExec. PSExec is a Sysinternals remote execution utility that allows running processes on a remote system without installing client software, making it a common tool for deploying payloads like Trojans to a target machine.
Question
You want to connect to your friend's computer and run a Trojan on it. Which of the following tools will you use to accomplish the task?
Options
- APSExec
- BHk.exe
- CRemoxec
- DGetAdmin.exe
How the community answered
(30 responses)- A80% (24)
- B3% (1)
- C7% (2)
- D10% (3)
Why each option
PSExec is a Sysinternals remote execution utility that allows running processes on a remote system without installing client software, making it a common tool for deploying payloads like Trojans to a target machine.
PSExec, part of the Microsoft Sysinternals suite, establishes an authenticated remote session and executes any specified program on the target computer over SMB. Attackers abuse it in post-exploitation scenarios because it requires no pre-installed agent and can run arbitrary executables - including Trojans - with the privileges of the authenticated user. It is one of the most commonly abused legitimate tools in lateral movement and remote malware deployment.
Hk.exe is a local Windows privilege escalation exploit tool, not a remote execution utility, so it cannot deploy software to another computer.
Remoxec is not a widely recognized or documented remote execution utility relevant to this attack scenario.
GetAdmin.exe is a local privilege escalation tool that grants administrator rights on the local machine, not a tool for executing code remotely on another system.
Concept tested: PSExec for remote process execution and Trojan deployment
Source: https://learn.microsoft.com/en-us/sysinternals/downloads/psexec
Topics
Community Discussion
No community discussion yet for this question.