The PsExec module in Metasploit uses which protocol to perform remote code execution?

• A. SMB
• B. SSH
• C. HTTPS
• D. FTP

Answer: (A)

Using the SMB protocol is what enables PsExec to perform remote code execution on Windows hosts. The Metasploit PsExec module authenticates to the target and copies the payload into an administrative share (ADMIN$) over SMB. It then leverages Windows remote service management (via RPC over SMB) to create or start a remote service that runs the payload, giving you code execution on the remote machine. Other protocols like SSH, HTTPS, or FTP don’t provide the same integrated Windows admin-share access and service-control mechanisms needed for this method, so they aren’t used here.