CompTIA
PT0-002 · Question #46
A penetration tester was able to gain access successfully to a Windows workstation on a mobile client's laptop. Which of the following can be used to ensure the tester is able to maintain access to…
The correct answer is A. schtasks /create /sc /ONSTART /tr C:\Temp\WindowsUpdate.exe. Window - should be schtasks. Crontab in Linux.
Post-exploitation and lateral movement
Question
A penetration tester was able to gain access successfully to a Windows workstation on a mobile client's laptop. Which of the following can be used to ensure the tester is able to maintain access to the system?
Options
- Aschtasks /create /sc /ONSTART /tr C:\Temp\WindowsUpdate.exe
- Bwmic startup get caption,command
- Ccrontab -l; echo "@reboot sleep 200 && ncat -lvp 4242 -e /bin/bash") | crontab 2>/dev/null
- Dsudo useradd -ou 0 -g 0 user
How the community answered
(56 responses)- A84% (47)
- B11% (6)
- C2% (1)
- D4% (2)
Explanation
Window - should be schtasks. Crontab in Linux.
Topics
#Persistence#Windows#Scheduled Tasks#Post-exploitation
Community Discussion
No community discussion yet for this question.