WGU D484 PENETRATION TESTING FULLY
SOLVED TEST PAPER GRADED A+
◉ Zenmap.
Answer: The GUI version of Nmap.
◉ Nikto.
Answer: Open-source vulnerability scanner designed to test web
applications against a wide variety of attacks. Used by system
administrators to verify configuration compliance, specifically web
servers.
◉ OpenVAS.
Answer: Open source vulnerability scanner
◉ SQLmap.
Answer: Automated tool used for SQL injection attack against or
website application database backend. Can brute-force crack the
password for an SQL database.
◉ Nessus.
Answer: Commercial vulnerability scanner
, ◉ Hashcat.
Answer: Password cracking tool used to reverse engineer hashed
passwords stored in files. Uses GPUs to crack passwords at high
speeds.
◉ Medusa.
Answer: Password cracking tool used to reverse engineer hashed
passwords stored in files. Brute-force login attack tool with some
improved features.
◉ Hydra/THC-Hydra.
Answer: Brute-force dictionary attack tool designed to work against
a variety of protocols and services, including SSH, HTTP/HTTPS,
SMB, and even databases. Uses the rockyou password list.
◉ CeWL.
Answer: Ruby application that spiders a website based on URL and
depth setting and then generates a custom wordlist.
◉ John the Ripper.
Answer: The go-to password recovery tool with a wide range of
functionality including auto-detecting common hashes, support for
SOLVED TEST PAPER GRADED A+
◉ Zenmap.
Answer: The GUI version of Nmap.
◉ Nikto.
Answer: Open-source vulnerability scanner designed to test web
applications against a wide variety of attacks. Used by system
administrators to verify configuration compliance, specifically web
servers.
◉ OpenVAS.
Answer: Open source vulnerability scanner
◉ SQLmap.
Answer: Automated tool used for SQL injection attack against or
website application database backend. Can brute-force crack the
password for an SQL database.
◉ Nessus.
Answer: Commercial vulnerability scanner
, ◉ Hashcat.
Answer: Password cracking tool used to reverse engineer hashed
passwords stored in files. Uses GPUs to crack passwords at high
speeds.
◉ Medusa.
Answer: Password cracking tool used to reverse engineer hashed
passwords stored in files. Brute-force login attack tool with some
improved features.
◉ Hydra/THC-Hydra.
Answer: Brute-force dictionary attack tool designed to work against
a variety of protocols and services, including SSH, HTTP/HTTPS,
SMB, and even databases. Uses the rockyou password list.
◉ CeWL.
Answer: Ruby application that spiders a website based on URL and
depth setting and then generates a custom wordlist.
◉ John the Ripper.
Answer: The go-to password recovery tool with a wide range of
functionality including auto-detecting common hashes, support for