nerdexam
GIAC

GPEN · Question #3

John works as a professional Ethical Hacker. He has been assigned a project to test the security local disk and obtains all the files on the Web site. Which of the following techniques is he using to

The correct answer is C. Web ripping. Web ripping (website mirroring) is the technique of downloading and copying all files and directory structures from a target website for offline analysis.

Web Application Security Testing

Question

John works as a professional Ethical Hacker. He has been assigned a project to test the security local disk and obtains all the files on the Web site. Which of the following techniques is he using to accomplish his task?

Options

  • ATCP FTP proxy scanning
  • BEavesdropping
  • CWeb ripping
  • DFingerprinting

How the community answered

(57 responses)
  • A
    7% (4)
  • B
    14% (8)
  • C
    75% (43)
  • D
    4% (2)

Why each option

Web ripping (website mirroring) is the technique of downloading and copying all files and directory structures from a target website for offline analysis.

ATCP FTP proxy scanning

TCP FTP proxy scanning exploits the FTP bounce vulnerability to scan third-party hosts through an FTP server, unrelated to copying website files.

BEavesdropping

Eavesdropping involves passively intercepting network traffic in transit, not actively downloading files from a web server.

CWeb rippingCorrect

Web ripping uses tools like HTTrack or wget to recursively download all files, links, and resources from a web server, creating a local copy. This allows a tester to analyze the full site structure, source files, and hidden resources offline without repeated live requests.

DFingerprinting

Fingerprinting identifies the operating system, software versions, or service banners of a target system and does not involve retrieving website file content.

Concept tested: Web ripping and website mirroring technique

Source: https://www.eccouncil.org/train-certify/certified-ethical-hacker-ceh/

Topics

#web ripping#ethical hacking#web application security#penetration testing techniques

Community Discussion

No community discussion yet for this question.

Full GPEN Practice