A penetration tester is conducting an assessment on a web application. Which of the following active reconnaissance techniques would be best for the tester to use to gather additional information abou

The correct answer is B. Crawling UR Is using an interception proxy. Crawling URIs using an interception proxy is the best active reconnaissance technique for gathering additional information about a web application. An interception proxy, such as Burp Suite or OWASP ZAP, allows the penetration tester to see and manipulate the requests and respons

Reconnaissance and enumeration

Question

A penetration tester is conducting an assessment on a web application. Which of the following active reconnaissance techniques would be best for the tester to use to gather additional information about the application?

Options

AUsing cURL with the verbose option
BCrawling UR Is using an interception proxy
CUsing Scapy for crafted requests
DCrawling URIs using a web browser

How the community answered

(34 responses)

A
18% (6)
B
71% (24)
C
3% (1)
D
9% (3)

Explanation

Crawling URIs using an interception proxy is the best active reconnaissance technique for gathering additional information about a web application. An interception proxy, such as Burp Suite or OWASP ZAP, allows the penetration tester to see and manipulate the requests and responses between the client and the server, providing detailed insights into the application's behavior, structure, and vulnerabilities. This technique is more comprehensive and controlled compared to using cURL or a web browser.

Topics

#active reconnaissance#web application testing#interception proxy#URI crawling

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice