nerdexam
CompTIA

PT0-002 · Question #8

A penetration tester has obtained shell access to a Windows host and wants to run a specially crafted binary for later execution using the wmic.exe process call create function. Which of the…

The correct answer is B. PowerShell modules. WMI allows scripting languages (such as VBScript or Windows PowerShell) to manage Microsoft Windows personal computers and servers, both locally and remotely. https://en.m.wikipedia.org/wiki/Windows_Management_Instrumentation

Post-exploitation and lateral movement

Question

A penetration tester has obtained shell access to a Windows host and wants to run a specially crafted binary for later execution using the wmic.exe process call create function. Which of the following OS or filesystem mechanisms is MOST likely to support this objective?

Options

  • AAlternate data streams
  • BPowerShell modules
  • CMP4 steganography
  • DPsExec

How the community answered

(45 responses)
  • A
    9% (4)
  • B
    84% (38)
  • C
    2% (1)
  • D
    4% (2)

Explanation

WMI allows scripting languages (such as VBScript or Windows PowerShell) to manage Microsoft Windows personal computers and servers, both locally and remotely. https://en.m.wikipedia.org/wiki/Windows_Management_Instrumentation

Topics

#Post-exploitation#Windows execution#WMI#PowerShell

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PT0-002 Practice