PT0-001 · Question #17
Which of the following tools would a penetration tester leverage to conduct OSINT? (Select TWO).
The correct answer is A. Shodan E. Maltego. Shodan and Maltego are purpose-built OSINT platforms used to gather intelligence on targets from publicly available sources before active testing begins.
Question
Which of the following tools would a penetration tester leverage to conduct OSINT? (Select TWO).
Options
- AShodan
- BSET
- CBeEF
- DWireshark
- EMaltego
- FDynamo
How the community answered
(39 responses)- A87% (34)
- B3% (1)
- D8% (3)
- F3% (1)
Why each option
Shodan and Maltego are purpose-built OSINT platforms used to gather intelligence on targets from publicly available sources before active testing begins.
Shodan is a search engine that indexes internet-connected devices, open ports, banners, and services, making it a primary OSINT tool for passively discovering exposed infrastructure on a target without direct interaction.
SET (Social Engineering Toolkit) is an active attack framework for crafting phishing campaigns and social engineering exploits, not a passive intelligence-gathering tool.
BeEF (Browser Exploitation Framework) is used to hook browsers and launch client-side attacks against already-identified targets, not to collect open-source intelligence.
Wireshark is a packet capture and analysis tool used during active network monitoring on an internal segment, not for gathering publicly available intelligence about a target.
Maltego is a link-analysis and OSINT platform that aggregates data from public sources such as DNS, WHOIS, social media, and email to map relationships between organizations, people, and infrastructure, making it essential for pre-engagement reconnaissance.
Dynamo is not a recognized penetration testing or OSINT tool in standard security toolsets.
Concept tested: OSINT tools for penetration testing reconnaissance
Source: https://help.shodan.io/the-basics/what-is-shodan
Topics
Community Discussion
No community discussion yet for this question.