When performing active information reconnaissance, which of the following should be tested FIRST before starting the exploitation process?

SQLmap is an automated SQL injection detection tool that actively probes application parameters during reconnaissance, enabling testers to quickly identify injectable endpoints before commencing exploitation. Running automated scanners first establishes the full attack surface and prioritizes targets, making subsequent manual techniques such as HTTP verb testing and input field analysis more focused and efficient.

TLS configuration testing evaluates transport layer security and is typically performed after initial application scanning has already identified the primary attack vectors.

HTTP verb testing is a targeted manual reconnaissance technique performed after automated scanning has mapped the application's available endpoints and services.

Manually testing input fields follows automated reconnaissance, because tools like SQLmap first identify which parameters warrant deeper manual investigation.