MENU
What file system vulnerability does the following command take advantage of?
type c:\anyfile.exe > c:\winnt\system32\calc.exe:anyfile.exe
Suggested Answer: A
Get Premium CPEH-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Canaries or canary words are known values that are placed between a buffer and control data on the stack to monitor buffer overflows. When the buffer overflows, it will clobber the canary, making the overflow evident. This is a reference to the historic practice of using canaries in coal mines, since they would be affected by toxic gases earlier than the miners, thus providing a biological warning system.
39 comments · newest first
KA
Katheryn
11 months ago
Backdoor access isn't the right term here, it's more about file system tricks.
DA
Daron
11 months ago
Wait, can you really do that with calc.exe? Sounds fishy.
BR
Brendan
11 months ago
Totally agree, it's all about Alternate Data Streams.
RO
Ronna
12 months ago
I thought it was NTFS vulnerabilities?
LI
Linn
12 months ago
That's definitely exploiting ADS!
BR
Brinda
12 months ago
Backdoor access sounds too broad for this question. I lean towards ADS, but I hope I’m not mixing it up with something else!
YO
Yolando
1 year ago
I feel like I've seen this command before in a lecture. It might be exploiting ADS, but I can't recall the specifics.
NI
Nickolas
1 year ago
I remember practicing a similar question about file systems, and I think it was about NTFS vulnerabilities. But this one seems different.
TO
Toi
1 year ago
I think this command is related to Alternate Data Streams, but I'm not entirely sure if that's the right term.
MA
Maryann
1 year ago
I'm a bit confused by this question. The command looks like it's trying to create a file called "calc.exe" in the system32 directory, but I'm not sure how that relates to a file system vulnerability. I'll have to do some more research on this before I can answer it.
ET
Ettie
1 year ago
Ah, I know this one! The command is using an NTFS feature called Alternate Data Streams (ADS) to create a hidden file. That's the vulnerability it's taking advantage of. I'm confident that's the right answer.
EM
Emelda
1 year ago
Hmm, I'm not sure about this one. The command seems to be doing something with a file called "calc.exe" but I'm not sure how that relates to a file system vulnerability. I'll have to think about this one a bit more.
JE
Jess
1 year ago
This looks like a question about file system vulnerabilities. I think the command is trying to take advantage of something related to NTFS, so I'll go with that.
MA
Marla
1 year ago
I heard the exam proctors are using this question to secretly recruit for the FBI's cybersecurity team. Better choose wisely, folks!
ST
Staci
1 year ago
Backdoor access? Really? That's about as subtle as a bull in a china shop. I'm going with the good old ADS option, that's where the real magic happens.
EM
Emelda
1 year ago
Backdoor access might be too obvious, ADS is more subtle.
PA
Paola
1 year ago
I agree, ADS can be quite powerful if used correctly.
JA
Jade
1 year ago
Yeah, ADS is definitely a clever way to hide things.
YA
Yaeko
1 year ago
I think ADS is the way to go, it's a sneaky one.
KA
Kaitlyn
1 year ago
Wait, is this one of those 'trick questions' where the answer is actually 'all of the above'? I'm not falling for that again!
LI
Lilli
1 year ago
C) NTFS
MA
Marica
1 year ago
B) ADS
CO
Coleen
1 year ago
A) HFS
LE
Leontine
1 year ago
Ah, the old Alternate Data Streams trick! Classic NTFS vulnerability, I'd bet my bottom dollar on that one.
IV
Ivette
1 year ago
NTFS is known for having some tricky vulnerabilities, like this one with Alternate Data Streams.
RI
Richelle
1 year ago
I remember reading about this vulnerability before. It's a sneaky way to hide malicious files.
HA
Hannah
1 year ago
Yes, you're right! It's definitely taking advantage of Alternate Data Streams in NTFS.
SH
Sherron
2 years ago
Ooh, this looks like an interesting one! I'm pretty sure it's got something to do with NTFS, but I'll have to think it through a bit more.
MI
Mickie
1 year ago
Interesting, I didn't know NTFS had that vulnerability. Thanks for the info!
DE
Detra
1 year ago
You're right! NTFS allows for alternate data streams, which can be used to hide files like in this command.
KA
Kara
1 year ago
C) NTFS
RO
Rosamond
1 year ago
I think it's ADS, because it's using alternate data streams to hide the malicious file.
FR
Franklyn
1 year ago
D) Backdoor access
AL
Alana
1 year ago
C) NTFS
KA
Kathrine
1 year ago
B) ADS
CE
Celeste
1 year ago
A) HFS
TO
Toshia
2 years ago
I believe the vulnerability being exploited here is related to NTFS, which supports ADS.
BA
Barb
2 years ago
Yes, I agree. ADS stands for Alternate Data Streams and can be used to hide malicious files.
LI
Lindsay
2 years ago
I think the command is taking advantage of ADS.