D332 Penetration Testing and Vulnerability Analysis - Set 3 - Part 3

Correct Answer: An advanced OSINT tool that gathers and analyzes information on targets

Recon-ng is an advanced OSINT tool similar to theHarvester but with additional features like file crawling and DNS enumeration.

Correct Answer: A GUI OSINT tool that uses "transforms" to gather and visualize public data sources

Maltego automates querying public data sources and uses node graphs to show the relationships between pieces of information.

Correct Answer: Communicating a lie or half-truth to gain information or access

Pretexting involves creating a false scenario to manipulate a victim into divulging sensitive information.

Correct Answer: A method for extracting information from a target by asking direct or indirect questions

Elicitation involves gathering information from the target without directly disclosing the intent of the questioner.

Correct Answer: An attack where attackers use information from social engineering to impersonate employees and request unauthorized actions

In BEC attacks, attackers use elicited information to pose as employees and send fake requests, often for financial transactions.

Correct Answer: A fake communication designed to trick the user into performing undesired actions

A hoax in cybersecurity is a false warning or message designed to deceive users into taking actions that may compromise their security.

Correct Answer: A tool in Kali Linux used to simulate social engineering attacks

SET in Kali Linux is a tool specifically designed to simulate social engineering attacks, such as phishing and pretexting.

Correct Answer: Leaving infected physical media in a public area for a victim to use

In baiting attacks, attackers leave malicious USB drives or other devices in public areas, hoping someone will plug them into a system.

Correct Answer: An attack that extracts sensitive information through phone calls

Vishing is a social engineering attack that involves extracting sensitive information through phone conversations.

Correct Answer: An attack where malicious code is injected into websites frequently visited by a specific group

Watering hole attacks involve compromising websites commonly visited by a target group, aiming to infect their systems.