GCIH: GIAC Certified Incident HandlerDemo

By GIAC · Question Mode

QuestionQ671

Scanning and Mapping

What is the penetration tester seeking in the following screenshot?

Question Image

  • A Open SMTP relays
  • B SWF objects hosted on the domain
  • C Java objects for potential exploitation
  • D Weak authentication on a database
Explanation

FlashDiggity searches target domains for Adobe Flash SWF applications, commonly using queries such as ext:swf; these files can then be downloaded and analyzed for vulnerabilities.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!