D484 – Pentest EXAM WITH CORRECT
|\ |\ |\ |\ |\ |\
ANSWERS
Recon-ng - CORRECT ANSWERS ✔✔A a full-featured Web
|\ |\ |\ |\ |\ |\ |\ |\
Reconnaissance framework written in Python (CLI - Linux) |\ |\ |\ |\ |\ |\ |\
Uses modules to customize the search. Some modules include
|\ |\ |\ |\ |\ |\ |\ |\
Whois query, PGP Key search, Social media profile associations,
|\ |\ |\ |\ |\ |\ |\ |\ |\
file crawler, and DNS record enumerator.
|\ |\ |\ |\ |\
Shodan - CORRECT ANSWERS ✔✔a search engine designed to
|\ |\ |\ |\ |\ |\ |\ |\ |\
locate and index IoT devices
|\ |\ |\ |\
connected to the Internet. There is a free version, but it requires
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\
a subscription to access all tools.
|\ |\ |\ |\ |\
Maltego - CORRECT ANSWERS ✔✔is a program that can be used
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\
to determine the relationships and real world links between
|\ |\ |\ |\ |\ |\ |\ |\ |\
people, groups of people (social networks), companies,
|\ |\ |\ |\ |\ |\ |\
organizations, websites, Internet infrastructure, phrases, |\ |\ |\ |\ |\
documents, and files. |\ |\
specializes in the visualization of data. The OSINT can generate
|\ |\ |\ |\ |\ |\ |\ |\ |\
extensive data, and it helps to find the connections between
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\
different pieces. |\
, theHarvester - CORRECT ANSWERS ✔✔an intuitive tool that can |\ |\ |\ |\ |\ |\ |\ |\ |\
search a company's visible|\ |\ |\
threat landscape using command line. The tool gathers
|\ |\ |\ |\ |\ |\ |\ |\
information on subdomain names, employee names, email |\ |\ |\ |\ |\ |\ |\
addresses, PGP key entries, open ports, and service banners.
|\ |\ |\ |\ |\ |\ |\ |\
Aircrack-ng - CORRECT ANSWERS ✔✔An open source tool for |\ |\ |\ |\ |\ |\ |\ |\ |\
penetration testing many aspects of wireless networks. |\ |\ |\ |\ |\ |\
suite of utilities is an earlier tool for wireless
|\ |\ |\ |\ |\ |\ |\ |\
network security testing and made of several command-line tools
|\ |\ |\ |\ |\ |\ |\ |\
used for wireless monitoring, attacking, testing, and password
|\ |\ |\ |\ |\ |\ |\ |\ |\
cracking.
Frida - CORRECT ANSWERS ✔✔an open-source tool that works
|\ |\ |\ |\ |\ |\ |\ |\ |\
with a wide range of operating
|\ |\ |\ |\ |\
systems and includes custom developer tools that help the
|\ |\ |\ |\ |\ |\ |\ |\ |\
PenTest team during application PenTesting.
|\ |\ |\ |\
a dynamic instrumentation toolkit for developers, reverse-
|\ |\ |\ |\ |\ |\
engineers, and security researchers. It allows you to inject your
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\
own scripts into black box processes. Hook any function, spy on
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\
crypto APIs or trace private application code, no source code
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\
needed.
Postman - CORRECT ANSWERS ✔✔a tool that provides an
|\ |\ |\ |\ |\ |\ |\ |\ |\
interactive and automatic environment |\ |\ |\
|\ |\ |\ |\ |\ |\
ANSWERS
Recon-ng - CORRECT ANSWERS ✔✔A a full-featured Web
|\ |\ |\ |\ |\ |\ |\ |\
Reconnaissance framework written in Python (CLI - Linux) |\ |\ |\ |\ |\ |\ |\
Uses modules to customize the search. Some modules include
|\ |\ |\ |\ |\ |\ |\ |\
Whois query, PGP Key search, Social media profile associations,
|\ |\ |\ |\ |\ |\ |\ |\ |\
file crawler, and DNS record enumerator.
|\ |\ |\ |\ |\
Shodan - CORRECT ANSWERS ✔✔a search engine designed to
|\ |\ |\ |\ |\ |\ |\ |\ |\
locate and index IoT devices
|\ |\ |\ |\
connected to the Internet. There is a free version, but it requires
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\
a subscription to access all tools.
|\ |\ |\ |\ |\
Maltego - CORRECT ANSWERS ✔✔is a program that can be used
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\
to determine the relationships and real world links between
|\ |\ |\ |\ |\ |\ |\ |\ |\
people, groups of people (social networks), companies,
|\ |\ |\ |\ |\ |\ |\
organizations, websites, Internet infrastructure, phrases, |\ |\ |\ |\ |\
documents, and files. |\ |\
specializes in the visualization of data. The OSINT can generate
|\ |\ |\ |\ |\ |\ |\ |\ |\
extensive data, and it helps to find the connections between
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\
different pieces. |\
, theHarvester - CORRECT ANSWERS ✔✔an intuitive tool that can |\ |\ |\ |\ |\ |\ |\ |\ |\
search a company's visible|\ |\ |\
threat landscape using command line. The tool gathers
|\ |\ |\ |\ |\ |\ |\ |\
information on subdomain names, employee names, email |\ |\ |\ |\ |\ |\ |\
addresses, PGP key entries, open ports, and service banners.
|\ |\ |\ |\ |\ |\ |\ |\
Aircrack-ng - CORRECT ANSWERS ✔✔An open source tool for |\ |\ |\ |\ |\ |\ |\ |\ |\
penetration testing many aspects of wireless networks. |\ |\ |\ |\ |\ |\
suite of utilities is an earlier tool for wireless
|\ |\ |\ |\ |\ |\ |\ |\
network security testing and made of several command-line tools
|\ |\ |\ |\ |\ |\ |\ |\
used for wireless monitoring, attacking, testing, and password
|\ |\ |\ |\ |\ |\ |\ |\ |\
cracking.
Frida - CORRECT ANSWERS ✔✔an open-source tool that works
|\ |\ |\ |\ |\ |\ |\ |\ |\
with a wide range of operating
|\ |\ |\ |\ |\
systems and includes custom developer tools that help the
|\ |\ |\ |\ |\ |\ |\ |\ |\
PenTest team during application PenTesting.
|\ |\ |\ |\
a dynamic instrumentation toolkit for developers, reverse-
|\ |\ |\ |\ |\ |\
engineers, and security researchers. It allows you to inject your
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\
own scripts into black box processes. Hook any function, spy on
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\
crypto APIs or trace private application code, no source code
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\
needed.
Postman - CORRECT ANSWERS ✔✔a tool that provides an
|\ |\ |\ |\ |\ |\ |\ |\ |\
interactive and automatic environment |\ |\ |\
