With one day remaining in the testing phase of an engagement, a penetration tester obtains these results from an Nmap scan:
Which of the following tools should the tester use to rapidly identify a potential attack path?
SearchSploit searches the Exploit-DB database for known public exploits associated with discovered software, services, and version numbers. It can quickly identify potential exploits for the enumerated Apache httpd, MySQL, and lighttpd services.
Community Discussion