During a penetration test, a junior tester uses Hunter.io for an assessment and plans to review the information that will be collected. Which of the following describes the information the junior…

Question

Options

• AA collection of email addresses for the target domain that is available on multiple sources on the
• BDNS records for the target domain and subdomains that could be used to increase the external
• CData breach information about the organization that could be used for additional enumeration
• DInformation from the target's main web page that collects usernames, metadata, and possible data

• A
  93% (50)
• B
  2% (1)
• C
  4% (2)
• D
  2% (1)

Explanation

Hunter.io Explanation

Hunter.io is an email discovery and verification tool specifically designed to find and validate professional email addresses associated with a target domain by crawling publicly available web sources, making option A the correct answer. The tool aggregates email addresses found across websites, social media, and other public internet sources, allowing penetration testers to identify potential targets for social engineering or phishing assessments during the reconnaissance phase.

Why the distractors are wrong:

• Option B describes tools like DNSrecon or Sublist3r, which are designed for DNS enumeration and subdomain discovery
• Option C describes services like HaveIBeenPwned or DeHashed, which specialize in data breach intelligence
• Option D describes tools like FOCA or Maltego, which harvest metadata and information directly from a target website

Memory Tip: Think of Hunter.io = Hunting for emails - the ".io" tool helps you "hunt" email addresses across the internet for a specific domain, just like a hunter tracks prey across multiple locations. If a question mentions emails + domain + public sources, Hunter.io is almost certainly the answer.

No community discussion yet for this question.