Which of the following tools can be used to perform reconnaissance on a web application? (Choose two)

The correct answer is A. Nmap B. Nikto. Nmap and Nikto are both purpose-built reconnaissance tools. Nmap performs network scanning - discovering open ports, running services, and OS fingerprinting on a target host, which is often the first step before attacking a web application. Nikto is a web-specific scanner that…

Question

Options

ANmap
BNikto
CMS Word
DApache Log Viewer

How the community answered

(24 responses)

A
79% (19)
C
13% (3)
D
8% (2)

Explanation

Nmap and Nikto are both purpose-built reconnaissance tools. Nmap performs network scanning - discovering open ports, running services, and OS fingerprinting on a target host, which is often the first step before attacking a web application. Nikto is a web-specific scanner that probes for outdated software, misconfigurations, dangerous files, and known vulnerabilities on web servers.

MS Word (C) is a word processor with no network scanning or probing capabilities whatsoever. Apache Log Viewer (D) is a passive log analysis tool - it reads logs from a server you already have access to, which is the opposite of reconnaissance (gathering intel on a target externally).

Memory tip: Think "active attackers use active tools" - Nmap and Nikto both reach out to a target over the network. If a tool just opens a file on your own machine (Word, Log Viewer), it can't recon anything.

Community Discussion

No community discussion yet for this question.

Full GWAPT Practice