QuestionQ327

Engagement Management

A penetration tester obtains shell access and attempts to run the following command, but it fails:

netsh advfirewall set domainprofile state off

What should the tester do to help resolve this issue?

  • A Find other attack paths.
  • B Perform privilege escalation.
  • C Validate the target system's fingerprint.
  • D Gather more data about the network.
Explanation

Changing the state of the Windows Firewall domain profile requires administrative privileges. A low-privilege shell cannot disable it, so the tester needs to escalate privileges.

Community Discussion

No comments yet. Be the first to start the discussion!