A penetration tester is crawling a target website that is available to the public. Which of the following represents the actions the penetration tester is performing?

URL hijacking involves registering similar-looking domain names to trick users or redirect traffic, which is a specific type of attack or deceptive practice, not the general action of crawling a target website.

Reconnaissance is the crucial initial phase of a penetration test where an attacker gathers information about a target, such as its public-facing assets, technologies, and structure, often by crawling websites or performing open-source intelligence (OSINT). This information helps identify potential attack surfaces before any active exploitation begins.

White box testing is a methodology where the tester has full knowledge of the system's internal workings, which describes the *approach* to testing rather than the specific *action* of crawling a public website.

Escalation of privilege refers to gaining higher access rights within a system than initially authorized, which is a post-exploitation activity and occurs after an initial compromise, not during initial information gathering.