A penetration tester successfully gains access to a Linux system and then uses the following command: find / -type f -ls > /tmp/recon.txt Which of the following best describes the tester's goal?

Question

Options

• APermission enumeration
• BSecrets enumeration
• CUser enumeration
• DService enumeration

• A
  11% (5)
• B
  79% (37)
• C
  6% (3)
• D
  4% (2)

Explanation

Explanation

Secrets enumeration (B) is correct because find / -type f -ls recursively searches the entire filesystem for all files and outputs detailed metadata (permissions, ownership, size, timestamps) to a file - the primary goal being to identify sensitive files such as configuration files, private keys, credentials, password files, and other "secrets" hidden across the system. This wide-net approach is a classic post-exploitation technique for discovering valuable data after gaining initial access.

Permission enumeration (A) is incorrect because while the -ls flag does display permissions, that is not the primary objective - permissions are incidental metadata, not the end goal of the sweep. User enumeration (C) is wrong because discovering user accounts is typically done through commands like cat /etc/passwd or who, not a full filesystem search. Service enumeration (D) is incorrect because identifying running services uses tools like netstat, ps, or systemctl, not a file search command.

Memory Tip: Think of it this way - when a tester dumps every file on the system to a text file, they're "treasure hunting" for secrets (keys, passwords, configs). If they wanted permissions, users, or services specifically, they'd use targeted commands, not a full filesystem sweep.

No community discussion yet for this question.