A penetration tester has been hired to perform a physical penetration test to gain access to a secure room within a client's building. Exterior reconnaissance identifies two entrances, a WiFi guest…

The correct answer is C. Recon-ng. Recon-ng is a powerful, modular OSINT (Open Source Intelligence) reconnaissance framework that aggregates data from multiple sources including social media, DNS records, WHOIS data, and public databases. For a physical penetration test, it supports broader intelligence…

Reconnaissance and enumeration

Question

A penetration tester has been hired to perform a physical penetration test to gain access to a secure room within a client’s building. Exterior reconnaissance identifies two entrances, a WiFi guest network, and multiple security cameras connected to the Internet. Which of the following tools or techniques would BEST support additional reconnaissance?

Options

AWardriving
BShodan
CRecon-ng
DAircrack-ng

How the community answered

(44 responses)

A
16% (7)
B
5% (2)
C
73% (32)
D
7% (3)

Explanation

Recon-ng is a powerful, modular OSINT (Open Source Intelligence) reconnaissance framework that aggregates data from multiple sources including social media, DNS records, WHOIS data, and public databases. For a physical penetration test, it supports broader intelligence gathering about the target organization - employee details, building information, and organizational structure - to plan the physical intrusion. Wardriving (A) only scans for WiFi networks already known to exist. Shodan (B) finds internet-connected devices but is narrower in scope. Aircrack-ng (D) is for cracking WiFi credentials, not passive reconnaissance.

Topics

#Reconnaissance#OSINT#Penetration Testing Tools#Information Gathering

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice