Exam PT0-002 All QuestionsBrowse all questions from this exam
Go to Exam
Question 47

A penetration tester is exploring a client's website. The tester performs a curl command and obtains the following:

Which of the following tools would be BEST for the penetration tester to use to explore this site further?

    Correct Answer: C

    The website being analyzed is a WordPress-based site, as evidenced by references such as 'WordPress' in the HTML and the use of 'wp-admin' in the link. WPScan is specifically designed to scan WordPress websites by identifying vulnerabilities related to the WordPress core, plugins, and themes. Therefore, WPScan is the best tool for the penetration tester to use to explore this site further.

Discussion
RRabbitOption: C

C. WPScan WPScan is a specialized tool for performing vulnerability scanning and security assessments of WordPress-based websites. It can be used to identify vulnerabilities in WordPress core, plugins, and themes. WPScan can also be used to detect the version of the WordPress installation, which is important for identifying vulnerabilities that are specific to a particular version of WordPress. Burp Suite is a widely used tool for web application security testing, it includes an intercepting proxy, a web application scanner, and a web application vulnerability scanner. But in this case, the website is a WordPress-based website, WPScan would be the best choice. DirBuster is a tool that can be used to brute-force directory and file names on web servers. It can be useful in identifying hidden or unlinked files and directories on a website. OWASP ZAP (Zed Attack Proxy) is a web application security scanner. It can be used to identify vulnerabilities in web applications by performing automated scans, manual testing, and fuzzing.

ryanzouOption: C

C for sure, wp-admin

nickwen007Option: C

WPScan is a security scanner for WordPress websites. It is designed to detect any potential vulnerabilities in WordPress installations and identify any installed plugins or themes that could pose a security risk. WPScan can also be used to scan for and report any known vulnerabilities in the WordPress codebase.

masso435Option: C

It states Word Press

weraponOption: C

Word Press use WPScan

Lino_CarbonOption: C

C because Word Press is in the HTML. WPScan is a WordPress site vulnerability scanner that identifies the plugins used by the website against a database of known vulnerabilities

kloug

ccccccc

Etc_Shadow28000Option: C

C. WPScan: WPScan is specifically designed for scanning WordPress sites. It can identify vulnerabilities, enumerate plugins, themes, and users, and check for known security issues in the WordPress installation. Analysis of Other Options: A. Burp Suite: Burp Suite is a powerful web application testing tool that can be used for a variety of tasks including scanning, intercepting, and analyzing web traffic. However, it is more general-purpose and not specifically tailored for WordPress. B. DirBuster: DirBuster is used to brute force directories and files on web servers. While useful, it does not provide the specialized functionality for WordPress that WPScan offers. D. OWASP ZAP: OWASP ZAP is another excellent general-purpose web application security scanner, similar to Burp Suite. It provides a wide range of functionalities but is not as specialized for WordPress as WPScan.

CaoilfhionOption: A

You can plug wpscan into burp suite...