CompTIA
PT0-001 · Question #215
While performing privilege escalation on a Windows 7 workstation, a penetration tester identifies a service that imports a DLL by name rather than an absolute path. To exploit this vulnerability…
The correct answer is B. Weak folder permissions of a directory in the DLL search path. https://itm4n.github.io/windows-dll-hijacking-clarified/
Attacks and exploits
Question
While performing privilege escalation on a Windows 7 workstation, a penetration tester identifies a service that imports a DLL by name rather than an absolute path. To exploit this vulnerability, which of the following criteria must be met?
Options
- APermissions not disabled in the DLL
- BWeak folder permissions of a directory in the DLL search path
- CWrite permissions in the C:\Windows\System32\imports directory
- DDLL not cryptographically signed by the vendor
How the community answered
(57 responses)- A4% (2)
- B72% (41)
- C16% (9)
- D9% (5)
Explanation
Topics
#DLL hijacking#privilege escalation#Windows#folder permissions
Community Discussion
No community discussion yet for this question.