Unit Tests Flashcards
(17 cards)
Which of the following tools are commonly used in penetration testing to identify and exploit network and application vulnerabilities? Select all that apply.
Metasploit Framework,
Nikto
What is DNS enumeration primarily used for in penetration testing?
To gather information about DNS names and their corresponding IP addresses
What does the nslookup tool do?
Provides information about DNS records for a specific domain
In DNS enumeration, what is a ‘Zone Transfer’?
An unauthorized attempt to copy all the DNS records from a server
What is the primary use of Gobuster during a penetration test?
To scan for hidden directories and files on a web server
Which tool would you use to browse the internet from the command line, useful for information gathering?
Lynx
Which of the following tools are not useful for enumerating shared directories and Samba systems?
SambaScan,
nikto
OSINT
Open Source Intelligence - used for gathering publicly available information
What is the purpose of using the Exif tool?
To extract metadata from files, which can include geolocation, camera details, and software used.
What type of information can Google dorking directly provide?
Server vulnerabilities
Sensitive directories or vulnerable access points on a web server
Specific file types and their locations
What command would you use to extract Exif data from an image named ‘photo.jpg’ using the Exif tool?
exiftool photo.jpg
What is the primary purpose of Lynx in the context of OSINT?
To serve as a text-based web browser for accessing information on websites without graphical content
Identify the correct syntax to use Gobuster for directory enumeration on a website (loan.atlas.local) using the common wordlist.
gobuster -u http://loan.atlas.local -w wordlist.txt
In the context of penetration testing, what is the significance of a DNS zone transfer?
It can expose all the records of a domain, providing detailed information about the internal network
Which of the following tools is useful for scanning/indexing directories of a web server?
lynx
Gobuster
dirb
What will be the output of the command below?
echo -e ‘www\nftp\nmail\nsoc\nicg\nicp’ | wc -l
6 I don’t really know
Which of the following is NOT typically a feature of a vulnerability scanner?
Cracking passwords of network devices
