A penetration tester is conducting a penetration test for a client that has many industrial devices. Which of the following would be the best tool for the tester to use?

The correct answer is D. Shodan. Shodan is a search engine specifically designed to locate devices connected to the internet, including industrial control systems (ICS) and other Internet of Things (IoT) devices. It is the best tool for this scenario because: - It specializes in identifying exposed industrial…

Reconnaissance and enumeration

Question

Options

ACensys
BRecon-ng
CMaltego
DShodan

How the community answered

(37 responses)

A
8% (3)
B
16% (6)
C
3% (1)
D
73% (27)

Explanation

Shodan is a search engine specifically designed to locate devices connected to the internet, including industrial control systems (ICS) and other Internet of Things (IoT) devices. It is the best tool for this scenario because: - It specializes in identifying exposed industrial devices and SCADA systems. - Provides detailed information about device types, open ports, services, and banners. - Helps assess the exposure of industrial devices without directly interacting with them, which minimizes the risk of disrupting fragile systems.

Topics

#Shodan#Reconnaissance tools#ICS/OT security#Internet-connected devices

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice