From the course: CompTIA PenTest+ (PT0-003) Cert Prep

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Additional enumeration techniques

Additional enumeration techniques

From the course: CompTIA PenTest+ (PT0-003) Cert Prep

Start my 1-month free trial Buy for my team

Additional enumeration techniques

“

- Now we're covering a few more important updates to the PT0-003 exam, specifically, in the areas of web crawling and pen testing tools. First, we'll explore how files like robots.text, and Sitemaps can assist attackers during reconnaissance, along with the risks of using certain web platform plugins. Then we'll introduce two powerful tools that you need to know about In Packet, which enables protocol level attacks and MSV Venom, a payload generation tool used in the Metasploit framework. The robots.text file tells web crawlers, which pages or directories they should avoid indexing. While intended for search engines, attackers often check this file for hidden directories, admin panels, or staging environments that may have been excluded from public view, but are still accessible. Always check robots.text during reconnaissance, it's often a map to pages the organization doesn't want you to see. Like robots.text,…

Contents