nerdexam
CompTIA

PT0-001 · Question #215

While performing privilege escalation on a Windows 7 workstation, a penetration tester identifies a service that imports a DLL by name rather than an absolute path. To exploit this vulnerability…

The correct answer is B. Weak folder permissions of a directory in the DLL search path. https://itm4n.github.io/windows-dll-hijacking-clarified/

Attacks and exploits

Question

While performing privilege escalation on a Windows 7 workstation, a penetration tester identifies a service that imports a DLL by name rather than an absolute path. To exploit this vulnerability, which of the following criteria must be met?

Options

  • APermissions not disabled in the DLL
  • BWeak folder permissions of a directory in the DLL search path
  • CWrite permissions in the C:\Windows\System32\imports directory
  • DDLL not cryptographically signed by the vendor

How the community answered

(57 responses)
  • A
    4% (2)
  • B
    72% (41)
  • C
    16% (9)
  • D
    9% (5)

Explanation

https://itm4n.github.io/windows-dll-hijacking-clarified/

Topics

#DLL hijacking#privilege escalation#Windows#folder permissions

Community Discussion

No community discussion yet for this question.

Full PT0-001 Practice