CompTIA PenTest+ (PT0-003)Reconnaissance and EnumerationEasy
A penetration tester is conducting OSINT for a client. They discover several public-facing documents on the client's website that contain employee names, email addresses, and phone numbers. Which of the following OSINT tools would be most effective for quickly extracting and organizing this type of information for further analysis?
- AMaltego
- BBurp Suite
- CNmap
- DHashcat
Show answer & explanationAnswer & explanation
Correct answer: A. Maltego
Maltego is specifically designed for gathering and visualizing OSINT, including relationships between individuals, organizations, and other data points found in public sources. It excels at extracting and organizing disparate pieces of information.
Why the other options are wrong
- B. Burp Suite is a web application security testing tool, primarily used for intercepting and manipulating web traffic.
- C. Nmap is a network scanner used for host discovery and service enumeration, not for OSINT data extraction.
- D. Hashcat is a password cracking tool, not relevant for OSINT data extraction and organization.
Maltego for OSINT
Maltego is a proprietary software used for open-source intelligence and forensics, offering a graphical interface for visualizing links between data.
- Gathers information from various public sources (transforms).
- Visualizes relationships between disparate data points.
- Useful for mapping out networks, people, and organizations.
Memory trick: Openly gather intelligent links.