PT0-003: CompTIA PenTest+Demo

By CompTIA · Question Mode

QuestionQ218

Engagement Management

During a social-engineering campaign, a penetration tester obtains a list of employees from social media and now wants to perform a phishing exercise. Which of the following should the tester use first?

  • A Wayback Machine
  • B Hunter.io
  • C SpiderFoot
  • D Social Engineering Toolkit
Explanation

Hunter.io’s Email Finder identifies a professional email address from a person’s name and their company or domain. Obtaining those email addresses is the necessary next step before using a phishing toolkit to conduct an email-based exercise.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!