Questions

Answer the following questions to test your knowledge of this chapter:

1. The persistence_exe module works by adding a value in the _________. 
2. What does the msfvenom flag -f psh mean?
3. The PowerSploit Persistence module scripts must be run in this order: 1) New-UserPersistenceOption, 2) New-ElevatedPersistenceOption, and 3) Add-Persistence – true or false?
4. A hacker has uploaded and persisted netcat on a compromised Windows Server 2008 box. They then run this command to allow their connections into the backdoor – netsh advfirewall firewall add rule name="WindowsUpdate" dir=out action=allow protocol=TCP localport=9009. They can’t connect to their backdoor. Why?
5. Permanent WMI subscriptions run as _____. 
6. In Metasploit, a .rc file is a _________. 
7. HKEY_LOCAL_MACHINE is shorted to ________ when using reg setval.