CompTIA PenTest+ (PT0-003)Reconnaissance and EnumerationHard
A penetration tester is performing reconnaissance against a dark-web forum known to be frequented by threat actors. They need to gather information about specific users or discussions without actively engaging with the forum or leaving any traces. They are looking for a technique that is completely passive. Which of the following best describes this approach?
- ARegistering an account and browsing the forum.
- BUsing a web scraper to download forum content.
- CSearching publicly indexed dark-web archives or search engines.
- DAttempting to brute-force user credentials for the forum.
Show answer & explanationAnswer & explanation
Correct answer: C. Searching publicly indexed dark-web archives or search engines.
Searching publicly indexed dark-web archives or specialized dark-web search engines is a completely passive reconnaissance technique. It involves querying existing public data repositories (like logs, cached pages, or search engine indexes) that may contain content from the target forum, without directly accessing or interacting with the forum itself.
Why the other options are wrong
- A. Registering and browsing is active engagement and creates a traceable presence.
- B. Using a web scraper directly accesses the forum, generating traffic and potentially leaving traces.
- D. Brute-forcing credentials is an active and aggressive attack, highly detectable, and definitely not passive.
Passive Dark-Web Reconnaissance
Gathering information from dark-web sources without direct interaction with the target platform, typically by querying publicly available archives, search engine indexes, or third-party data repositories.
- No direct interaction with the target.
- Relies on existing data from third parties.
- Minimizes detection risk.
- Examples: specialized dark-web search engines, archived content.
Memory trick: ARCHIVES hide, but can be searched passively