PT0-003: CompTIA PenTest+Demo

By CompTIA · Question Mode

QuestionQ257

Attacks and Exploits

A penetration tester is using the Intruder tool in Burp Suite Community Edition during a web-application assessment. The tester finds that the test is taking too long to finish.

Which of the following tools can the tester use to speed up the test while obtaining similar results?

  • A TruffleHog
  • B Postman
  • C Wfuzz
  • D WPScan
Explanation

Wfuzz is a web-application fuzzer that automates requests using payload wordlists and fuzzing positions, making it suitable for the same kinds of parameter fuzzing, enumeration, and brute-force-style testing performed by Burp Intruder. It avoids the performance throttling associated with Intruder in Burp Suite Community Edition.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!