A penetration tester will be performing a vulnerability scan as part of the penetration test on a client's website. The tester plans to run several Nmap scripts that probe for vulnerabilities while…

The correct answer is B. --script "http*vuln*". The Nmap Scripting Engine (NSE) option --script allows the tester to run specific script categories. The wildcard pattern "httpvuln" matches all NSE scripts that target HTTP-based vulnerabilities, making it the correct choice for scanning a web server for vulnerabilities…

Information Gathering and Vulnerability Scanning

Question

A penetration tester will be performing a vulnerability scan as part of the penetration test on a client's website. The tester plans to run several Nmap scripts that probe for vulnerabilities while avoiding detection. Which of the following Nmap options will the penetration tester MOST likely utilize?

Options

A-а8 -T0
B--script "httpvuln"
C-sn
D-O -A

How the community answered

(47 responses)

A
2% (1)
B
79% (37)
C
13% (6)
D
6% (3)

Explanation

The Nmap Scripting Engine (NSE) option --script allows the tester to run specific script categories. The wildcard pattern "httpvuln" matches all NSE scripts that target HTTP-based vulnerabilities, making it the correct choice for scanning a web server for vulnerabilities. Option A (-T0) is an ultra-slow timing option for stealth but -a8 is not valid Nmap syntax. Option C (-sn) performs only host discovery with no port or vulnerability scanning. Option D (-O -A) performs aggressive OS fingerprinting and service detection, which is noisy and not focused on web vulnerabilities.

Topics

#Nmap#Vulnerability Scanning#Nmap Scripting Engine#Web Application Security

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice