Random

Question 1

Nikto

Answer 1

Web Application Scanner

• Main strength is finding vulnerabilities like SQL, and command-injection susceptibilities, XSS and improper server configuration
• CL utility

Question 2

Arachni

Answer 2

Web Application Scanner

• Ruby-based web app scanner with a special focus on speed
• Able to reduce false positives from incorporating feedback

Question 3

Responder

Answer 3

Enumeration
- Tools that can be used to gain remote access by poisoning name services to gather hashes and credentials from systesms within a LAN

Question 4

Reaver

Answer 4

Wireless Assessment Tool

- Takes advantage of a vulnerability that exists in AP’s that use WPS feature

Question 5

Scout Suite

Answer 5

Cloud Infrastructure Assessment Tool

• Open source auditing tool that specializes in verification, auditing and managed services
• Supports AWS, Azure and Google Cloud Platform, enables security teams to determine the security posture of their cloud assets