To maintain persistence after a reboot, the tester needs a method that automatically restarts when the system reboots.
* Option A (Reverse shell) #: Reverse shells do not persist after a reboot unless paired with scheduled tasks or registry modifications.
* Option B (Process injection) #: Injecting into a process is temporary-once the system reboots, the injected process is gone.
* Option C (Scheduled task) #: Correct.
* A scheduled task can execute malware, reverse shells, or scripts on system startup, ensuring persistence.
* Example:
schtasks /create /sc onlogon /tn "SystemUpdate" /tr "C:\malicious.exe"
* Option D (Credential dumping) #: While useful for privilege escalation, it does not provide persistence.
# Reference: CompTIA PenTest+ PT0-003 Official Guide - Persistence Techniques