Windows Exploitation and Privilege Escalation CPENT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   You find a Windows service named 'SupportSvc' with the following configuration: the service binary path is C:\Program Files\Support\svc.exe, and the service's registry key HKLM\SYSTEM\CurrentControlSet\Services\SupportSvc has weak permissions allowing the Users group to modify the ImagePath value. The service runs as SYSTEM. What is the most direct escalation technique?

   • AModify the ImagePath value to point to your payload and restart the service.
   • BUse the service's unquoted path to execute your payload.
   • CCreate a new service with a similar name.
   • DReplace the existing svc.exe with your payload.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   You have a shell as a service account that has the SeAssignPrimaryTokenPrivilege and SeImpersonatePrivilege. You need to escalate to SYSTEM. Which tool is specifically designed to exploit these privileges?

   • AWindows Exploit Suggester
   • BPowerUp
   • CJuicyPotato
   • DMimikatz
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   You have write access to the registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad.exe. You want to escalate privileges when an administrator runs notepad.exe. Which registry value should you set?

   • ASet the Debugger value to the path of your payload.
   • BSet the GlobalFlag value to 0x2.
   • CSet the DisableExceptionChainValidation value to 1.
   • DSet the UseFilter value to 1.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of exploiting weak registry permissions for privilege escalation?

   • ATo modify a registry key that controls a service or application to execute arbitrary code with elevated privileges.
   • BTo export registry keys to a file for offline analysis.
   • CTo delete registry keys to cause a denial of service.
   • DTo read sensitive information stored in the registry, such as passwords.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is a common technique to exploit a scheduled task for privilege escalation?

   • AReplacing the task's executable with a malicious binary.
   • BDeleting the scheduled task to cause a denial of service.
   • CDisabling the task to prevent it from running.
   • DChanging the task's schedule to run more frequently.
   Reveal Solution Discussion Select an answer first