nerdexam
CompTIA

PT0-002 · Question #123

A penetration tester locates a few unquoted service paths during an engagement. Which of the following can the tester attempt to do with these?

The correct answer is D. Attempt privilege escalation attacks. Unquoted service paths are a critical Windows vulnerability that allows a penetration tester to perform privilege escalation by exploiting how Windows resolves executable paths with spaces.

Attacks and Exploits

Question

A penetration tester locates a few unquoted service paths during an engagement. Which of the following can the tester attempt to do with these?

Options

  • AAttempt to crack the service account passwords.
  • BAttempt DLL hijacking attacks.
  • CAttempt to locate weak file and folder permissions.
  • DAttempt privilege escalation attacks.

How the community answered

(25 responses)
  • A
    12% (3)
  • B
    8% (2)
  • C
    4% (1)
  • D
    76% (19)

Why each option

Unquoted service paths are a critical Windows vulnerability that allows a penetration tester to perform privilege escalation by exploiting how Windows resolves executable paths with spaces.

AAttempt to crack the service account passwords.

Unquoted service paths are an execution vulnerability and do not directly provide a mechanism for cracking service account passwords.

BAttempt DLL hijacking attacks.

DLL hijacking is a distinct vulnerability that abuses the dynamic-link library loading process, which is separate from exploiting unquoted service paths.

CAttempt to locate weak file and folder permissions.

While weak file and folder permissions can also lead to privilege escalation, unquoted service paths are a specific, separate vulnerability related to executable path parsing, not primarily about finding existing weak permissions.

DAttempt privilege escalation attacks.Correct

Unquoted service paths in Windows services are a classic privilege escalation vulnerability. If a service's executable path contains spaces but lacks quotation marks, the operating system may attempt to execute a malicious binary placed in an earlier, vulnerable segment of the path, leading to the attacker gaining elevated privileges when the service starts.

Concept tested: Unquoted service path privilege escalation

Source: https://learn.microsoft.com/en-us/windows/win32/services/unquoted-service-path

Topics

#Unquoted Service Paths#Privilege Escalation#Windows Exploitation#Service Vulnerabilities

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PT0-002 Practice