D332 Penetration Testing and Vulnerability Analysis - Set 1 - Part 3

Correct Answer: A more robust version of TheHarvester, gathering additional information like DNS and files

Recon-ng is an open-source tool that extends the capabilities of TheHarvester, providing additional features for DNS enumeration and file crawling.

Correct Answer: A data analysis tool that uses "transforms" to automate data gathering and visualization

Maltego uses "transforms" to collect and analyze data from public sources, then displays the data in graphs that show relationships between entities.

Correct Answer: A social engineering tactic that involves presenting false information to manipulate someone into giving access

Pretexting is a form of social engineering in which the attacker fabricates a story or pretext to gain the trust of the victim and extract confidential information.

Correct Answer: A tactic used to passively collect information without the target knowing

Elicitation involves obtaining information from a target without directly asking for it, often using casual conversation or indirect means.

Correct Answer: A type of phishing attack in which attackers use email to impersonate business leaders

BEC attacks involve attackers posing as business executives via email to manipulate employees into transferring money or sensitive data.

Correct Answer: A form of malicious communication that tricks users into taking undesired actions

Hoaxes use fake communications to deceive users into taking actions that may harm their systems or result in data loss.

Correct Answer: A collection of tools in Kali Linux designed for social engineering attacks like phishing

SET (Social Engineering Toolkit) helps attackers create phishing campaigns and malicious payloads to exploit human vulnerabilities in security.

Correct Answer: Redirecting users to a fake website that looks legitimate to steal their credentials

In pharming, attackers create fake websites that mimic legitimate ones, tricking users into entering their credentials.

Correct Answer: Leaving infected physical media in a location for someone to find and use

Baiting involves planting infected media, such as USB drives, in accessible locations where victims are likely to insert them into their computers.

Correct Answer: Techniques for phone-based social engineering attacks

Vishing is voice phishing where attackers extract information over the phone, and SPIT (Spam over Internet Telephony) is unsolicited voice messages sent over VoIP services.