ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ113

VerifiedWeb Application Penetration Testing Methodology

Peter is conducting a penetration-testing assignment. During reconnaissance, he discovers that the client's SYSLOG systems are taken offline for four hours on the second Saturday of each month for maintenance. He wants to examine the client's web pages for sensitive information without activating the logging mechanism. The client's website contains hundreds of pages, making it difficult to analyze all the information in only four hours.

What should Peter do to analyze all the web pages stealthily?

Explanation

HTTrack can mirror the complete website while logging is unavailable, creating a local copy that can be examined after the maintenance window without generating additional requests to the client's web servers.

Community Discussion

No comments yet. Be the first to start the discussion!