While performing privilege escalation on a Windows 7 workstation, a penetration tester identifies a service that imports a DLL by name rather than an absolute path. To exploit this vulnerability, which of the following criteria must be met?
A) Permissions not disabled in the DLL
B) Weak folder permissions of a directory in the DLL search path
C) Write permissions in the C:\Windows\System32\imports directory
D) DLL not cryptographically signed by the vendor

Question

Quizplus · Accepted Answer

Weak folder permissions of a directory in the DLL search path allow an attacker to place a malicious DLL in a location where the service will load it, leading to privilege escalation.

While Performing Privilege Escalation on a Windows 7 Workstation, a Penetration