PT0-003: CompTIA PenTest+Demo

By CompTIA · Question Mode

QuestionQ217

Reconnaissance and Enumeration

A tester is conducting an engagement with evasion and stealth requirements. Which of the following enumeration methods is least likely to be detected by the IDS?

  • A curl https://api.shodan.io/shodan/host/search?key=&query=hostname:
  • B proxychains nmap -sV -T2
  • C for i in ; do curl -k $i; done
  • D nmap -sV -T2
Explanation

The Shodan Host Search API searches Shodan’s existing database of indexed host information rather than sending enumeration probes to the target. Because the target IDS does not observe a direct scan or service request from this lookup, it is less likely to detect it than Nmap version scans or direct curl requests. Shodan API Documentation

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!