PT0-003: CompTIA PenTest+Demo

By CompTIA · Question Mode

QuestionQ18

Engagement Management

With one day remaining in the testing phase of an engagement, a penetration tester obtains these results from an Nmap scan:

Question Image

Which of the following tools should the tester use to rapidly identify a potential attack path?

  • A msfvenom
  • B SearchSploit
  • C sqlmap
  • D BeEF
Explanation

SearchSploit searches the Exploit-DB database for known public exploits associated with discovered software, services, and version numbers. It can quickly identify potential exploits for the enumerated Apache httpd, MySQL, and lighttpd services.

Community Discussion

No comments yet. Be the first to start the discussion!