A penetration tester scans a website and obtains the following output: Which of the following would be the best next step tor the penetration tester?

The correct answer is B. Review the robots.txt file. The robots.txt file often contains paths or directories that the website owner does not want search engines to index. However, these paths can reveal valuable information or hidden resources to a penetration tester, such as administrative interfaces, backup files, or other…

Reconnaissance and enumeration

Question

A penetration tester scans a website and obtains the following output:

Which of the following would be the best next step tor the penetration tester?

Exhibit

Options

AUse WPScan
BReview the robots.txt file
COpen the phpinfo page
DBrowse the /wp-admin folder

How the community answered

(35 responses)

A
11% (4)
B
77% (27)
C
6% (2)
D
6% (2)

Explanation

The robots.txt file often contains paths or directories that the website owner does not want search engines to index. However, these paths can reveal valuable information or hidden resources to a penetration tester, such as administrative interfaces, backup files, or other sensitive directories. Steps after reviewing robots.txt: 1. If sensitive paths are discovered, explore them to identify potential vulnerabilities or valuable 2. Based on findings, you may proceed to tools like WPScan (if the website runs on WordPress) or explore other exposed files or directories.

Topics

#Web Application Testing#Reconnaissance#Information Gathering#Website Enumeration

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice